Be the change you want to see in the world
- 2 Posts
- 53 Comments
CriticalMiss@lemmy.worldto
Linux@lemmy.world•CISA Warns of Linux Kernel Use-After-Free Vulnerability Exploited in Attacks to Deploy RansomwareEnglish
8·3 months agoNot necessarily, if you follow proper hosting etiquette, then even if they break in they should only be a standard user and have no access to the rest of your system. But most self hosters just run everything as root as it’s less of a hassle.
CriticalMiss@lemmy.worldto
Selfhosted@lemmy.world•Jellyfin for iOS 1.7.0 Submitted to the App StoreEnglish
7·4 months agoPretty good. Downloads on the main app has been something that held people back.
CriticalMiss@lemmy.worldto
Selfhosted@lemmy.world•Do bots/scrapers check uncommon ports?English
1·4 months agoMoving your port over to a nonstandard one is not a solution (unless the problem you experience is too many logs from sshd, and even then, logrotate exists), its security by obscurity which doesn’t really solve anything at all. Only way your server will be safe is by ensuring the packages on your server are up to date and that you harden it to the point where it isn’t too much of nuisance.
CriticalMiss@lemmy.worldto
Selfhosted@lemmy.world•[Help] Media Server + *arr stack: Follow TRaSH guides or my own setup?English
11·4 months agoIt is aimed at members (often new)of private trackers, a hobby which often assumes you’ve already got a 170tb NAS at home that just needs content to fill it. This is evidenced by the fact they inherit HDBs “golden popcorn” system and tier their groups pretty high up.
CriticalMiss@lemmy.worldto
Selfhosted@lemmy.world•[Help] Media Server + *arr stack: Follow TRaSH guides or my own setup?English
31·4 months agoI think TRaSH serves as a good base. Their custom filters can be instantly imported using recyclarr and give you a general idea of how custom filters are meant to be used (which can be very overwhelming when you’re new to the ordeal) but sadly I disagree with TRaSH a lot on their group tiers for media formats. I think they make some mistakes placing some encoders as high as they do. (for example: micro encodes from PTer and BHDStudio shouldn’t be in the BluRay groups at all, as some of their releases are compressed harder than WEB releases from streaming services. I download BluRay encodes because I want it to be compressed to the point where it still looks identical to the BluRay it was sourced from.) Once you’re in the game long enough you just make up your own mind on what release groups should be prioritized over others.
As for your question regarding staying within the same file system, the answer is yes. Moving things over to the SSD does two things for you. 1) for every file you also need a duplicate on the SSD, not very efficient. 2) there’s not much to gain from this unless you’re expecting a large amount of simultaneous traffic. An HDD can carry about ~20 streams of 1080p content (as most releases are compressed to 8-10mbps) which is more than enough for most households.
I’d keep the SSD for seeding honestly, so that you can build up buffer on the trackers you’re on, but for most it’s still perfectly doable with HDDs only.
It’s actually insane that the only company who I’ve noticed pull off s0 sleep properly is Apple with their MacBooks, which is sad. I understand they likely had already figured out how to do it properly by working on it for iOS but still, goddamn, it can’t be difficult to fix it elsewhere?
I understand Linux is a FOSS OS (and they kinda at the mercy of hardware manufacturers to upstream support for hardware) so I have no complaints there, but Microsoft that makes so much money can’t get people to fix it? I call bullshir.
CriticalMiss@lemmy.worldto
Linux@lemmy.world•Fedora proposal to drop 32-bit support has been withdrawnEnglish
48·7 months agoSo we’re just gonna keep chugging along until 2038? Please.
Yeah but sometimes you have to spin it in the jack because it’s making a weird static noise. USB-C is king.
Correct me if I’m wrong, but I thought Idiocracy didn’t propose any solution at all. If I remember correctly, smart people not having kids was just a plot driver. Sadly, with the way things are that is how it’s gonna happen in our lifetime most likely. Education is getting worse over time, so the ones who’ll be able to educate their kids properly are those who are already educated.
CriticalMiss@lemmy.worldto
Lemmy Shitpost@lemmy.world•Looking for the perfect 5 year anniversary gift?
9·8 months agoBig knives are up to something
CriticalMiss@lemmy.worldto
Linux@lemmy.world•EU OS aims to free the European public sector desktopEnglish
7·10 months agoCan someone tell whoever is leading this project to go with EurOS? Please? Such a missed opportunity.
0.0.0.0 means listen on all IPs
CriticalMiss@lemmy.worldto
Selfhosted@lemmy.world•How do you handle SSL certs and internet access in your setup?English
2·1 year ago- I don’t think this is a problem with tailscale but you should check. Also you don’t have to pipe all the traffic through your tunnel. In the allowed IPs you can specify only your subnet so that everything else leaves via the default gateway.
- in the DNS server field in your WireGuard config you can specify anything, doesn’t have to be RFC1918 compliant. 1.1.1.1 will work too
- At the end of the day, a threat model is always gonna be security vs. convenience. Plex was used as an attack vector in the past as most most people don’t rush to patch it (and rightfully so, there are countless horror stories of PMS updates breaking the whole thing entirely). If you trust that you know what you’re doing, and trust the applications you’re running to treat security seriously (hint: Plex doesn’t) then go ahead, set up your reverse proxy server of choice (easiest would be Traefik, but if you need more robustness then nginx is still king) and open 443 to the internet.
Let’s hope the jury disagrees
CriticalMiss@lemmy.worldto
Selfhosted@lemmy.world•The Immich core team goes full-time | ImmichEnglish
8·2 years agoFor the license to be changed every team member needs to submit a written agreement that he agrees to the change, otherwise their contributions must be removed as they were written under a different license, the only exception is usually permissive licenses such as MIT/BSD 3 clause.
Usually, to rugpull FOSS contributors, companies who maintain FOSS software ask contributors to sign a CLA which waives their rights and lets the control their contributions. Immich isn’t doing any of that, and it will likely remain AGPL forever because changing the license will be a big hassle for them with the amount of contributors.
CriticalMiss@lemmy.worldto
Selfhosted@lemmy.world•What to be aware of before opening port 25 on a postfix Raspberry Pi?English
5·2 years agoHi, I recommend you read the book “Run Your Own Mail Server”. The fact that a book exists for this topic is all the proof you need to not do this decision. But if you absolutely must, this is the way.
CriticalMiss@lemmy.worldto
Selfhosted@lemmy.world•Immich v1.102.0 - ⚠️ Breaking Changes (OPT-IN ONLY)English
12·2 years agoOnly I rely on my services and if they break I’ll fix them myself.


AirVPN seems to be popular amongst torrenters I know