• 0 Posts
  • 58 Comments
Joined 1 year ago
cake
Cake day: April 30th, 2024

help-circle

  • You can download a collection of thousands (maybe a million I don’t even know) of books in Spanish in epub format, from the “secret library”. It’s like a 100Gb torrent, but way worth it.

    Ebooks tens to have long lasting battery. I spent a few hours reading on monday.

    Just now I’m on my phone, but if you are interested let me know and I’ll try to find the link and will mp it to you if you want.

    And just now I’ve been thinking that epubs being so small size maybe there’s a way to transmit them over this radio mesh networks on demand, like some sort of radio library. I’ve have to look into that. Maybe they are too big for that as radio bandwidth for data transfer tends to be incredibly small.











  • daniskarma@lemmy.dbzer0.com
    cake
    toSelfhosted@lemmy.worldSharing Jellyfin
    link
    fedilink
    English
    arrow-up
    3
    ·
    edit-2
    4 days ago

    IP addresses are fairly public.

    In order to get that kind of infection there need to be a serious vulnerability. None of the services I expose have those kind of vulnerabilities, and I keep them updated.

    A Zero-day may be possible, but it can happen with any software.

    Any way, even if some of my services got infected that way, I have them all in docker containers. If they managed somehow to insert any malicious software it would have disappeared in the next restart of the container.

    And in order to have a software that breaks out of the container it would need to also have some sort of zero-day docker exploit. Two zero-days needed for accomplish that…

    Every expose software I have is running on a caddy reverse proxy. And caddy is the only authorized author on my firewall so it gets more difficult to try to run an unexpected malicious software through it.




  • daniskarma@lemmy.dbzer0.com
    cake
    toSelfhosted@lemmy.worldSharing Jellyfin
    link
    fedilink
    English
    arrow-up
    9
    arrow-down
    1
    ·
    4 days ago

    I have had jellyfin exposed to the net for multiple years now.

    Countless bots probing everyday, some banned by my security measures some don’t. There have never been a breach. Not even close.

    To begin with, of you look at what this bots are doing most of them try to target vulnerabilities from older software. I have never even seen a bot targeting jellyfin at all. It’s vulnerabilities are not worth attacking, too complex to get it right and very little reward as what can mostly be done is to stream some content or messing around with someo database. No monetary gain. AFAIK there’s not a jellyfin vulnerability that would allow running anything on the host. Most vulnerabilities are related to unauthorized actions of the jellyfin API.

    Most bots, if not all, target other systems, mostly in search of outdated software with very bad vulnerabilities where they could really get some profit.


  • daniskarma@lemmy.dbzer0.com
    cake
    toSelfhosted@lemmy.worldSharing Jellyfin
    link
    fedilink
    English
    arrow-up
    48
    arrow-down
    5
    ·
    edit-2
    5 days ago

    You can share jellyfin over the net.

    The security issues that tend to be quoted are less important than some people claim them to be.

    For instance the unauthorized streaming bug, often quoted as one of the worst jellyfin security issues, in order to work the attacker need to know the exact id of the item they want to stream, which is virtually impossible unless they are or have been an authorized client at some point.

    Just set it up with the typical bruteforce protections and you’ll be fine.




  • It doesn’t really makes much sense.

    The amount of power is the same. They don’t get more power by voting a pope every 5 years rather than every 30 years. They still vote for the pope, the person in that position is always there because it was voted by the Cardinals.

    If something it would be the opposite. Selecting a person for a longer period would give you more power as your decision is more time in place unable to be challenged.


  • Some people like to travel in Minecraft. There’s something in just picking a direction and moving there for days, exploring. In Minecraft you would never reach the end. In Luanti you’ll hit the end of the world in a few hours.

    Also for massive multiplayer purposes. Servers with hundreds of people are impossible in luanti’s size.

    And it’s not just me. You go to Luanti’s forum and one of the biggest threads is one asking for infinite worlds, players want it.

    They used to say the the world size was embedded deep into the code and that a massive rewrite would be needed for that and that it was not worth it. But someone already made a fork that has this feature and didn’t change that much so… And no, the fork is not a solution due to Luanti “modular” approach that fork is incompatible with any Luanti game so there’s no game really just the base “engine”.

    I don’t have high hopes of devs ever addressing that, so I stopped following the project. I hope be proven wrong, but something tells me that it’s a change that will never me made.