just because it’s self hosted doesn’t mean it’s all private though.
OWUI is built using node libraries which typically has a large attack surface. wouldn’t be surprised if some illicit group figures this out and tries to activate something for a mitm attack that sniffs out prompts for things like keys, tokens, etc.
don’t confuse selfhosted with privacy. it’s still your responsibility to ensure privacy enforcement.
ollama itself is safe the same way VLC Media Player is safe. You just load a model like an MP4. I don’t think it’s uniquely vulnerable to anything, as it just spits out text.
Now the real trouble comes when people decide to connect it to a command line…
just because it’s self hosted doesn’t mean it’s all private though.
OWUI is built using node libraries which typically has a large attack surface. wouldn’t be surprised if some illicit group figures this out and tries to activate something for a mitm attack that sniffs out prompts for things like keys, tokens, etc.
don’t confuse selfhosted with privacy. it’s still your responsibility to ensure privacy enforcement.
trust nothing, verify everything.
ollama itself is safe the same way VLC Media Player is safe. You just load a model like an MP4. I don’t think it’s uniquely vulnerable to anything, as it just spits out text.
Now the real trouble comes when people decide to connect it to a command line…