Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)F

fmstrat

@ fmstrat @lemmy.nowsci.com

Posts
22
Comments
868
Joined
3 yr. ago

  • Your fav guide/method for securing Jellyfin?

    Jump

  • Well, I wouldn't say the media issues are worse than a full domain access issue, but despite my comment above, I agree with you.

    The security split-issue feels reminiscent of when Plex didn't use SSL and wouldn't implement it until a white-hat POC token exploit was produced and provided to them (of which I was the author). If JF was my project, these would be top of my list.

  • AI is creeping into the Linux kernel - and official policy is needed ASAP

    Jump

  • I mean, read into what they wrote about:

    I'm pleased to announce the release of AUTOSEL, a complete rewrite of the stable kernel patch selection tool that Julia Lawall and I presented back in 2018[1]. Unlike the previous version that relied on word statistics and older neural network techniques, AUTOSEL leverages modern large language models and embedding technology to provide significantly more accurate recommendations.

    ...

    Would be great to hear more. My very subjective feeling is that the last batch of AUTOSEL is much worse than the previous. Easily 50% of false positives.

    Seems the newly rewritten kernel review tools wasn't what waa expected as an upgrade.

    https://lists.linaro.org/archives/list/linux-stable-mirror@lists.linaro.org/thread/EJWMRUH2JTI34CPWVZZG62XJ7HMIH5WT/

  • Your fav guide/method for securing Jellyfin?

    Jump

  • In a first, Google has released data on how much energy an AI prompt uses

    Jump

  • I'd like to understand what this math was before accepting this as fact.

  • Chrome VPN Extension With 100k Installs Screenshots All Sites Users Visit

    Jump

  • Not to be confused with "Tor Browser" (not a VPN, just providing clarification)

  • Mastodon admins can now bridge entire instances to Bluesky

    Jump

  • Ok, maybe found a new reason. I'm not sure how the binding arbitration would work going through a bridge.

    Without the ability to participate on the Bluesky network without having to create an account with Bluesky (the company), users would have to subject themselves to Bluesky's terms of service, and could have their access to the Bluesky network unilaterally terminated by Bluesky (the company).

    ...

    As things stand, Bluesky has very bad terms of service that every user who creates an account has to subject themselves to. In particular, Bluesky's ToS contain a "binding arbitration" waiver that forces users to surrender the right to sue Bluesky no matter how the company harms them.

    Source: https://pluralistic.net/2025/08/15/dogs-breakfast/#by-clicking-this-you-agree-on-behalf-of-your-employer-to-release-me-from-all-obligations-and-waivers-arising-from-any-and-all-NON-NEGOTIATED-agreements

  • Mastodon admins can now bridge entire instances to Bluesky

    Jump

  • Unless I'm misunderstanding: One-way bridging.

    That's very different from Federation.

  • The two types of people

    Jump

  • Depends on if you changed to the route of the first comment.

  • What was your first distro?

    Jump

  • Yea very similar progression, I ended on Debian (so far), and Bazzite for gaming.

  • Understanding GNOME Shell’s focus stealing prevention

    Jump

  • Now tell me why Alt-Tab randomly decides that I'm using Firefox when I'm not.

  • What was your first distro?

    Jump

  • Slackware was my first linux distro, but would Solaris or SunOS count?

  • Is there a selfhosted eBooks app that can do this?

    Jump

  • Kavita. It started for comics and moved on to books. It supports OPDS, the standard by which readers like KOReader and Mihon connect to fetch books.

    I have tried so many, Calibre (not good for graphic novels), Komga (very dated in comparison to Kavita), and more, but for both graphic novels and books, it won't be beat.

    @4dpancake92@lemmy.world if you like Komga, take a look at Kavita. I was happy with my switch.

  • Deleted

    Which job(s) would you refuse to accept regardless of how good the pay is?

    Jump

  • I think you misread. I didn't work with or for insurance companies.

  • Plex server patching required

    Jump

  • Ahhh. I put the wireguard client on the router, so it's more of a site to site setup for TVs.

  • Plex server patching required

    Jump

  • Yea the catch was we were asking for TLS for a long time, and this was pre- Let's Encrypt, so those patching on their own didn't have a free (minus work) way to handle it. It took a releasable POC to get action.

    All out devices just have a permanent Wireguard client since it uses basically no battery, and then a allow rules for households. If you don't want to run the client, and don't want to take the time to learn, you don't get access. But I totally get how that's not for everyone.

  • What would you do if you could transform into an invisible tiger?

    Jump

  • He means "pretend to be a leopard."

  • What character from a movie/show/game/anything did you think you were going to hate, but ended up liking?

    Jump

  • Plex server patching required

    Jump

  • I posted a while back, tested the biggest open endpoints and they were properly secured, the issues just weren't updated.

    Note: Plex didn't have SSL, and refused to implement it, until ~6 weeks after I created a POC token exploit. Here's the GitHub repo I posted as a patch before they got their system in order: https://github.com/Fmstrat/plex-ssl. In other words, don't give them too much credit.

  • Deleted

    Which job(s) would you refuse to accept regardless of how good the pay is?

    Jump

  • I worked in marketing. Though..

    • I create materials/tools to help patients with chronic diseases stay adherent to medication while building a better lifestyle
    • I made materials to convince health insurance companies to cover medications

    So, it's not all bad. I moved on to hospital records analysis to identify things that would kill people, and now work in protocols and systems that help preserve the privacy of user data (one of them even uses ActivityPub).

    I've been pretty fortunate in the jobs I've been able to find.