• 0 Posts
  • 22 Comments
Joined 7 months ago
cake
Cake day: December 14th, 2023

help-circle


  • One game I used to play recently started working suddenly in the latest proton major release (I think 9), it wasn’t mentioned in the release notes and it has no community around the game since it was released around windows vista, as well as being pulled from stores for many years (I still have it on steam) so I don’t think anyone intentionally fixed it but probably just a result of some system call being implemented or tweaked to behave closer to correct.

    So yeah, it’s very good to test your broken wine apps every 6 months to a year because slowly anything I ever had issues with in wine is starting to work.


  • You could end up working for a company that develops free software so that’s one way. My company develops an open source science tool and it’s free for anyone to hack on, run their own copy, and use for commercial purposes, but we sell support which usually seems to involve being paid to develop certain features and fix certain bugs, as well as advise on how to keep their system running smoothly.


  • BakedCatboy@lemmy.mltoProton @lemmy.worldIs the future passwordless?
    link
    fedilink
    English
    arrow-up
    32
    arrow-down
    1
    ·
    3 months ago

    Passkeys are like using a private key to log in. There are several ways it’s better:

    • Passwords can be stored improperly by a website leading it to be leaked
      • Passkeys never leave the device so a website being breached can never leak your passkey
      • The website only stores the public portion of the key which is useless to an attacker
      • Passkeys can only be stolen by attacking and breaching the device or password manager that holds it
    • Passwords can and often are reused across multiple sites so a single leaked password can compromise many sites
      • Passkeys are created for each site so an attacker would need to steal each one separately
    • Passwords can be phished by fooling a user into entering the password
      • Passkeys can’t be phished easily since it’s designed not to leave the device - if such an attack was found it could be patched in the browser / password manager. You can’t patch all password forms to stop phishing in the same way

    If you’re familiar with ssh keys, it’s similar to that and why the top security recommendation for new servers is to disable passwords and use keys instead.








  • I don’t think it’s completely true to say it’s not accurate in any way. You can still get a rough estimate based on the proportion of likes to dislikes coming from people with the extension installed, then extrapolate that out based on the public number of likes provided by YouTube.

    Of course it’s not going to be anything more than a ballpark number, but being able to tell the difference between “almost nobody is disliking this” and “like half of viewers are disliking this” is super useful information. If nothing else it serves as a third party keeping a dislike count for users who installed the extension. They’re not claiming to access the real YouTube data, so I think it’s unnecessarily dismissive of what it does to call it bullshit.


  • I’m mostly in the same boat. So far anything I didn’t like could be easily turned off. I unpinned the Plex TV and movies so it never shows up. I don’t mind discover because it means it returns results for things I don’t have, letting me watchlist it so overseerr can request it without me needing to leave Plex.

    I have a jellyfin container running in the same docker compose yml with the exact same media folders mounted to it with quicksync passed through to it in addition to Plex, reverse proxy already set up so switching is as easy as opening a different URL or app since it’s already up and running.


  • Isn’t Miracast for sending video data? The thing I like about Chromecast is that the phone or remote app just tells the Chromecast where to load the media directly from, and then only sends playback control commands. That makes it a lot lighter resource wise because you don’t need to proxy the stream through a device like a phone that wants to go to sleep to save battery.





  • If it’s just videos you want, you can try using network inspector to see if you can catch the url of the file - assuming giving the url of the video’s webpage to youtube-dl along with a snapshot of your browsers logged in cookies doesn’t work. You might also see an m3u8 in the network inspector, which you can also give the url of to youtube-dl and it’ll download all the segments and merge them into a video file (you might also need auth cookies or headers unless it’s a temporary url which can work anywhere, just check the network request to see what’s sent). Some sites do separate m3u8 for video and audio or multiple ones for different video qualities, so you might need to change the quality to maximum for the browser to request the high quality stream url. You might also see a file requested that just lists the urls for m3u8s of each quality. If you see a vtt file then you can also grab that, convert to an srt, and remux with mkvtoolnix to embed it into the file as an optional subtitle.

    This should all work as long as they don’t use drm / widevine type stuff and as long as they don’t have some supremely annoying security measures (like using authenticated urls that are one time use so by the time your browser shows it in the network inspector the url is expired or something). Otherwise for widevine you’ll need to do some kind of screen / HDMI capture type setup.


  • I think that text is from melroy, so according to him. From seeing his interactions in the kbin issue tracker I get somewhat of an egotistical impression of him, because he would often take an issue that has just been opened and not triaged or discussed what the best fix is, and he would open a PR with how he thinks it should be fixed, and it sounds like his frustration is that his hasty PRs weren’t getting merged quickly because people wanted to come to a consensus.

    Maybe I’m just reading into it but it felt like he just wanted his name on something and it wasn’t happening with kbin.

    Edit: I want to add that I don’t mean to shit on him as a dev or as a person - it’s possible that I’ve only seen a one-sided view of his interactions as a busy contributor who just wants to whittle down the issue list as fast as possible and that he’s got good intentions, and regardless he seems like a very capable dev. It’s just that based on my perusing of issues and discussions I’ve come across, it doesn’t seem fun to work with him to contribute, and if I were to treat the contributors list as a scoreboard and had the goal of having my name on as many commits as possible, I think it would be hard to tell us apart. I was just going to keep my thoughts about this to myself but I’ve seen some other people comment similar things in other threads about mbin so maybe it’s worth sharing my skepticism about mbin. Take from it what you will.


  • BakedCatboy@lemmy.mltoSelfhosted@lemmy.worldNAS/Media Server Build Recommendations
    link
    fedilink
    English
    arrow-up
    1
    arrow-down
    1
    ·
    edit-2
    6 months ago

    I went with the DS1621xs+, the main driving factors being:

    • that I already had a 6 drive raidz2 array in truenas and wanted to keep the same configuration
    • I also wanted to have ECC, which while maybe not necessary, the most valuable thing I store is family photos which I want to do everything within my budget to protect.

    If I remember correctly only the 1621xs+ met those requirements, though if I was willing to go without ECC (which requires going with xeon) then the DS620slim would have given me 6 bays and integrated graphics which includes quicksync and would have allowed me to do power efficient transcoding and thus running Plex/jf right on the nas. So there’s tradeoffs, but I tend to lean towards overkill.

    If you know what level of redundancy you want and how many drives you want to be running considering how much the drives will cost, whether you want an extra level of redundancy while rebuilds are happening after 1 failure, how much space is sacrificed to parity, then that’s a good way to narrow down off the shelf nases if you go that way. Newegg’s NAS builder comes in handy if you just select “All” capacities and then use the nas filters by number of drive bays, then you can compare whats left.

    And since the 1621xs+ has a pretty powerful xeon, I run most things on the nas itself. Synology supports docker and docker compose out of the box (once the container app is installed), so I just ssh into the box and keep my compose folders somewhere in the btrfs volume. Docker nicely allows anything to be run without worrying about dependencies being available on the host OS, the only gotcha is kernel stuff since docker containers share the host kernel - for example wire guard which relies on kernel support I could only get to work using a user space wire guard docker container (using boringtun) and after the VPN/tail scale app is installed (presumably because that adds tap/tun interfaces that’s needed for vpn containers to work.

    Only jellyfin/Plex is on my NUC. On the nas I run:

    • Adguard

    • Sonarr/radarr/lidarr/prowlarr/transmission/overseerr

    • Castblock

    • Grocy

    • Nextcloud

    • A few nginx instances for websites

    • Uptime-kuma

    • Vaultwarden

    • Traefik and wire guard which connects to a vps as a reverse proxy for anything that needs to be accessible from the public internet