• 0 Posts
  • 98 Comments
Joined 2 years ago
cake
Cake day: June 4th, 2023

help-circle



  • and you’re trusting this WAY too much.

    I don’t need to trust because I know how it works: https://github.com/jellyfin/jellyfin/blob/767ee2b5c41ddcceba869981b34d3f59d684bc00/Emby.Server.Implementations/Library/LibraryManager.cs#L538

    Tools like shodan will categorically identify EVERY jellyfin instance that scanners will run into.

    They can’t. Without the domain, the reverse proxy will return the default page.

    No. Read the whole thread.

    I did.

    If your path is similar to my path

    It does not need to be similar, it needs to be identical.

    • There are 2 popular Docker images, both store the media in different paths by default
    • You do not have to follow the default path
    • The server does not even have to run in Docker
    • The sub path is entirely defined by the user
    • You do not know the naming scheme for the content

    There are 1000s of variations you have to check for every single file name, with 0 feedback until you get a hit. After you have gone through all that trouble, you can now confirm that the file exists and do great things like retrieve the cover art or the subtitles. None of which is incriminating or useful.

    All it takes is for one angsty company to rainbow table variants of their movies name to screw you completely over.

    My threat model does not include “angsty company worried about copyright infringement on private Jellyfin servers”.

    Why bother scanning the entire internet for public Jellyfin instances when you can just subpoena Plex into telling you who has illegal content stored?


  • You are reading too much into the issue linked.

    In order to actually abuse any of the unsecured endpoints, you need to have knowledge of the domain, the media/user/stream IDs and media paths. You don’t get those unless you have a user on the Jellyfin instance and brute forcing them is not practical. If you trust the users you add to your Jellyfin instance, there is not much risk in exposing it to the internet.

    Those issues definitely need to be addressed at some point, but it doesn’t make Jellyfin exposed on the internet open to anyone.





  • Hardware MIGHT be controlled by signal RGB

    OpenRGB to the rescue: https://flathub.org/apps/org.openrgb.OpenRGB

    controlling the pump in my AIO?

    What do you need to control about your pump? I sure hope it works without OS support.

    Or the sound levels on ny headset?

    Move the volume slider up or down?

    Or the DPI in my mouse?

    Save them to the mouse as profile if it can or use Piper: https://flathub.org/apps/org.freedesktop.Piper

    in AMD you lose access to certain features like AMFM2

    FSR Frame Gen works just fine, not sure why you need fake frames in more games.

    the FOSS solutions are not industry standard, so sure, I can learn to use LibreOffice, but that’s worth absolutely nothing when you apply for a corporate job and they expect you to know how to use outlook as a bare minimum

    There is also OnlyOffice and online MS Office. Not sure what you need to know about Outlook to open it and use your eyes to read the mails.

    even the Google office suite is being adopted faster

    Good news, it runs in a browser and works on every OS!

    Ah, but if the software is available there’s still a chance it doesn’t work because it’s missing a dependency or something and you have to ask people to use the terminal and… Sigh

    I have not fixed dependencies issue on Linux since the early 2000s. Flatpaks are your friend https://flathub.org/ .

    All in all, it’s just behind in many ways, sure, for some people it’s ok, and for laptops I’d think is mostly ok, great even.

    I run it on my high end PC and I disagree. It’s ahead in many ways.

    • The graphics drivers are included and don’t need any bloated software to work
    • It has a banger OpenGL driver, which makes games like Minecraft run significantly faster.
    • It has a very active community for game support for games where the developer does not care
    • It translates older DirectX versions to Vulkan automatically, resulting in a performance uplift and more stability. People on Windows are installing DXVK just so older games work. Look up DXVK in the Steam forums.
    • It downloads shader caches from Valve, preventing shader stutter in games that don’t do it on their own

    That list could go on for a while and it’s only for gaming.

    I haven’t even gone into installation and not having to run ShutUp10 every time just to make the OS usable. Or how KDE is so much cleaner than Windows. Or how I don’t have any ads in my start menu, don’t have to force download Candy Crush on first boot, don’t have pre-installed apps I can’t remove, don’t have to block my own OS in its firewall to get rid of telemetry, don’t have to be told that I need to upgrade to Windows 11 constantly.

    For work: Docker just works, complex networking setups are not a pain to setup, creating VMs is so much easier and has so many more features. VPN is so seamlessly setup. I can read almost every file system on the planet and use ROCm without jumping through hoops. Not to mention I don’t get Copilot and Recall shoved down my throat.

    Are there issues on Linux? Sure, lots of them. But if I find them I can tell somebody about it and don’t have to deal with them for centuries.

    I’m rooting for Steam OS to release to desktops because my living room PC is LITERALLY just for gaming, so that “could” work nicely.

    SteamOS is just a modern Linux distro with Steam pre-installed and in autostart. If stuff works there, it works on regular Linux just as well.

    Bazzite achieves the same thing right now: https://bazzite.gg/






  • That’s the thing I don’t like about Postgres either. The performance is significantly better than with MariaDB but Postgres is such a pain for non-enterprise use.

    Same with crash recovery, Postgres just can’t recover if the WAL is corrupted. MariaDB will happily fix itself but Postgres will just sit there and wait until somebody babysits it.

    So you better spin up a second Postgres container, run pg_resetwal, restart the database and terminate any open transactions manually with a 2 page query you hopefully wrote down. Might reindex all tables as well to be sure.

    I have a separate “postgres unfuck” script by now.


  • How else are you supposed to deal with 4-way stops? In my state it’s first arrival goes first, however if two cars arrive at the same time the car on the right proceeds first.

    By always respecting the second rule. There are no 4-way stops here. If an intersection does not have signs the vehicle on the right always has priority. No exceptions.

    It’s not that complicated, and I’m not sure what’s wrong with it

    The problem is that people have different views on who came first but there are no different views on where right is. If there are any disputes there can be no arguments on who came 20 milliseconds earlier, instead you can just look at who had the right of way.


  • IPv6 is pretty much identical to IPv4 in terms of functionality.

    The biggest difference is that there is no more need for NAT with IPv6 because of the sheer amount of IPv6 addresses available. Every device in an IPv6 network gets their own public IP.

    For example: I get 1 public IPv4 address from my ISP but 4,722,366,482,869,645,213,696 IPv6 addresses. That’s a number I can’t even pronounce and it’s just for me.

    There are a few advantages that this brings:

    • Any client in the network can get a fresh IP every day to reduce tracking
    • It is pretty much impossible to run a full network scan on this amount of IP addresses
    • Every device can expose their own service on their own IP (For example: You can run multiple web servers on the same port without a reverse proxy or multiple people can host their own game server on the same port)

    There are some more smaller changes that improve performance compared to IPv4, but it’s minimal.