News for hackers. Stuff that matters.
Re:Fast-stable-diffusion colabs, +25% speed increase and mem... by xrd on Monday September 26, 2022 @01:36PM (#32985893)
I love StableDiffusion, and these projects are so exciting.

But. Isn't this the new equivalent of downloading and running a shell script WHICH YOU HAVE NO IDEA WHAT IT DOES? This colab notebook asks for me to give it access to my GDrive. If any of the sd code were modified from the original SD codebase (as I would expect it to be, this is a FORK afterall!) then why couldn't it pull certain anything it wants from my GDrive?

Colab does not protect you from this, right? There is no way to sandbox GDrive access, it is all or nothing, right?

Re:Fast-stable-diffusion colabs, +25% speed increase and mem... by stoplying1 on Monday September 26, 2022 @03:34PM (#32987272)
Everything about the SD ecosystem feels like... I'm not sure. It seems like there are tons of different small, uncoordinated efforts, all of which have either no documentation or large plaque install scripts, and then it's all python at the bottom with all of the joys of it's package ecosystem.

And then all of these versions where they're so super smart and want access to my GD and an API token to some account of mine? Christ, it would be so, so, so easy to weaponize one of these, add some screenshots and "beat" the original and harvest some Google Drive goodies.

In a, I guess I'll say, less frustrating world... there'd be a Nice or Guix expression and it would be relatively trivial to just launch it anywhere Linux and GPU exists.

Re:Fast-stable-diffusion colabs, +25% speed increase and mem... by neodypsis on Monday September 26, 2022 @02:12PM (#32986295)
There are Stable Diffusion notebooks out there that don't require GDrive access and run fine in Colab.
Re:Fast-stable-diffusion colabs, +25% speed increase and mem... by johnsimer on Monday September 26, 2022 @02:07PM (#32986253)
Run it on a burner Gmail account
Re:Fast-stable-diffusion colabs, +25% speed increase and mem... by radicaldreamer on Monday September 26, 2022 @02:28PM (#32986472)
In addition to having a google account without any sensitive info, running everything in VMs locally should become a standard practice
Re:Fast-stable-diffusion colabs, +25% speed increase and mem... by MacsHeadroom on Monday September 26, 2022 @02:52PM (#32986806)
Colab runs everything remotely unless you point it at a locally installed Jupyter runtime.
Re:Fast-stable-diffusion colabs, +25% speed increase and mem... by nomel on Monday September 26, 2022 @04:30PM (#32987954)
How does one make a burner Gmail account these days? Last I tried, a unique phone number was required.
Re:Fast-stable-diffusion colabs, +25% speed increase and mem... by deepserket on Tuesday September 27, 2022 @05:22AM (#32993154)
if your goal is to have an empty Drive you can reuse the same number to create a new account.

Edit: i just created a new account from my smartphone without a number

Re:Fast-stable-diffusion colabs, +25% speed increase and mem... by FartyMcFarter on Monday September 26, 2022 @07:50PM (#32990128)
Get a burner SIM card ?
Re:Fast-stable-diffusion colabs, +25% speed increase and mem... by ricopags on Monday September 26, 2022 @02:07PM (#32986248)
Much like you'd use a sandbox VM to test untrusted code locally, you could use a sandbox google account to work with untrusted Colabs.
Re:Fast-stable-diffusion colabs, +25% speed increase and mem... by victornomad on Monday September 26, 2022 @01:43PM (#32985969)
Probably if you know how to run the notebook you might also know how to quickly go through the code and see if it might do a potential harm to your hard drive.

I dont see a big deal TBH.

Re:Fast-stable-diffusion colabs, +25% speed increase and mem... by londons_explore on Monday September 26, 2022 @01:55PM (#32986096)
Buuuuut.... Notice that it appears this repo contains precompiled binaries and no obvious link to the source....

This is literally running some binary blob and giving it access to a big chunk of your digital life. If it were malicious, all it would need to do is steal the token and then upload some illegal images and your whole Google account will be permabanned.