Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)T

teawrecks

@ teawrecks @sopuli.xyz

Posts
1
Comments
161
Joined
3 yr. ago

  • Proton VPN's anti-censorship Stealth protocol finally lands on Linux

    Jump

  • Yeah, I do wish proton was more open about their tech. I do know that proton allows you to make free accounts without giving them identifiable info (which makes them a popular choice for scammers, which is annoying when services just block their email domain thinking it's always nefarious). I don't recall what the payment options are, but I'd be surprised if they didn't have any crypto/anonymous ways to pay.

    I still haven't made use of the proton VPN, mostly because, yeah, I don't care for running a proprietary client for something like that, but also the last time I looked into it they did offer wireguard configs that would do the same thing. The client is just intended to be a familiar cross platform interface. No idea about this Stealth mode protocol, though. Seems like that would have to be run locally.

    If you do pay for their email, I recommend bringing your own domain. 99% of the time the proton.me domain works fine, but for the 1% of the time when a system has a problem, it does make me wonder if there's somewhere in their system blacklisting their domain.

    with the cooperation with law enforcement proton has stated to do

    I'm curious what statements you're referring to. For a company to continue operating, they have to comply with local law enforcement to the extent the law requires. They don't have a choice. If you asked mullvad, they would say the same. But the point of all these services is that they (claim to) do their best to not keep any records by design, so that when law enforcement comes with a subpoena, they have as little as possible to hand over in cooperation. But yeah, as you said, at the end of the day we just have to trust that that's how they operate.

  • Proton VPN's anti-censorship Stealth protocol finally lands on Linux

    Jump

  • The nice thing about proton is that they offer a suite of tools comparable to Google, but all privacy respecting (email, docs, drive, etc). So they're an easy recommendation for people dependent on those services. I almost never use their VPN, but it is neat that I have the option of a paid VPN along with the rest.

    Also I only just noticed the other day that proton offers multi-hop VPNs now, so that your entrance and exit nodes are under different jurisdictions, is that just the standard for VPN services these days? I thought that was a pretty neat feature.

  • Linux Mint’s Next Release Will Fully Support Wayland in Cinnamon

    Jump

  • It's supported.

  • AURpocalypse now: a look at the recent AUR attacks

    Jump

  • The AUR should not be thought of as a package manager repo. It should be thought of as a pastebin for pkgbuild scripts, i.e. build instructions. Running them without looking is the equivalent of blindly copying shell commands from stackoverflow.

    If you are thinking "I want to install this package I found, it doesn't exist in any repo, but their build instructions are complex and don't have instructions for arch," a pkgbuild is a great resource. At the very least you can read someone's pkgbuild to see what dependencies and build steps worked for them (in the same way that you can disect a shell script line-by-line to understand what it's doing).

    The only official way to use the AUR is to manually download a pkgbuild file and use manually run makepkg to execute it. All the other tools that turn it into a convenient repo source (ex. yay, paru, pamac) are unofficial.

  • AURpocalypse now: a look at the recent AUR attacks

    Jump

  • Does anyone know if yay gives me the ability to hook my own tool in to review pkgbuilds before accepting them? They argue that they don't want to just give attackers access to a scanning tool, because all they'd do is just iterate on their pkgbuild until it reports "not detected". But if yay gives me an easy way to hook in whatever tool I want, the attacker can't be sure what tool to defeat. If thousands of people all run various tools, surely a few of them will spot the anomaly quickly.

    Edit: it looks like they've added this exact functionality in response to the attacks: https://jguer.space/blog/2026-06-15-yay-v13

  • [META] Are paid for, closed source projects, being advertised on this community, appropriate?

    Jump

  • That sounds like you're describing someone who is only making a lemmy account because they see potential customers they want to advertise to.

    That's the exact reason I don't want someone to make a lemmy account.

  • Arch Linux AUR Malware Campaign Hits Multiple User-Contributed Packages

    Jump

  • The AUR is unsafe by design. It's not intended to be something you just install from willy-nilly. It's intended to be a helpful way for arch users who know what they're doing to exchange a convenient way to install arbitrary packages. But you should always be just as wary of it as copy/pasting shell code from a random person on the internet.

  • What's your contingency plan for the apocalypse?

    Jump

  • At first I was going to say, the 3 2 1 Backup rule won't stop the planet from being destroyed by a meteor. But then I remembered the data on Voyager1.

  • Privacy-preserving alternative to Ring cameras (Raspberry Pi Zero 2W)!

    Jump

  • Curious what went wrong with your Reolink run. That's what I've got. Doesn't require an app or account, and works with home assistant.

  • People who are staying on Plex, have you tried Jellyfin? What about it do you not prefer? (real question)

    Jump

  • It's not a matter of privacy vs UX. I actually think Plex has ruined their UX. But if you have friends and family, some are tech-illiterate, some have their own media servers, and you all want to share with each other quickly and easily, Plex is the only viable option. Same if it's just you, but you travel a lot, and want to watch something from your home server without lugging around a device that has access to your VPN and a screen/hdmi-out.

    Jellyfin is really only viable if it's just you on your own network.

  • People who are staying on Plex, have you tried Jellyfin? What about it do you not prefer? (real question)

    Jump

  • To add on to the top post: with Plex you only need 1 account and can exchange access to multiple servers. I can browse all the media my account has access to with ease.

    Jellyfin needs an account per server. If the client multiplexed between them seamlessly, that would probably be fine enough. But it would be nice if they supported some method of federation.

    And Jellyfin has a list of CVEs that they haven't addressed in years, which makes not want to make it visible outside my network.

    I want to ditch Plex, but this is the primary sticking point for me. No criticism to the Jellyfin devs btw, they're doing the lord's work, I have nothing but respect for them.

    Another minor one is that the Plex app works with a controller on my bazzite HTPC, but the Jellyfin one was hit or miss. I could get it to work once, and then the next day the controller would do nothing and the UI would be acting weird. I will go back and try it periodically to see if it's ready, but last time I checked it wasn't.

  • 1.org now the default search engine in WaterFox.

    Jump

  • Do you mean Librewolf? Librefox looks dead.

  • Anticheat check - which competitive games actually work on Linux?

    Jump

  • This is unfortunately easier said than done. This defcon talk from 14y ago comes to mind.

    If 100% of the game state is server authoritative, then there are always exploits in the netcode. Because either you have netcode that is so rigid that the first time a packet is late, or some floating point math doesn't add up right, you don't know what to do and break; or you have netcode that makes up for little discrepancies, and hackers eventually find them and abuse them.

    It would be nice if the client isn't told about player locations they don't see yet, but now the server has to calculate occlusion for every player vs every opponent on every server tick. And let's say you find a magically optimized way to do this, now how do you attenuate sounds like footstep or gunshot dynamics?

    Anticheat is always an arms race. There is no "just do X, and you've defeated the cheaters". Contrary to popular belief, hundreds of very smart people have been working at solving these problems for literally decades, and the arms race always ends up on the client.

  • Wayland Comes To Minecraft

    Jump

  • yawn

    Call me when it's implemented in redstone.

  • Plex Announces Massive Price Hike on Lifetime Subscription Plans

    Jump

  • As a lifetime owner, the number of features they've deprecated is probably the worst part.

    • Photo support (luckily Immich came along)
    • Tidal integration (no idea if that was Plex or Tidal's decision)
    • Plugins (god forbid anyone add the functionality they keep removing)

    It's close between that and the last app overhaul that removed a bunch of functionality.

  • The future of AI in Ubuntu [Except it's Blockchains instead of AI]

    Jump

  • Yes, the tech industry has a new hammer and everything looks like a nail, but the reality is, LLMs are finding far more purchase than blockchains did. I wholeheartedly agree that you should not be forced to use an LLM when you don't want to, much less have any app run one locally without consent, but to suggest LLMs have similar usefulness to blockchains is just ignoring reality. This isn't the crypto bubble, this is the dotcom bubble. It would be more like replacing all the instances of "AI" with "the internet" or "computers".

  • Plex’s price hikes prove I was right to switch to Jellyfin

    Jump

  • Could you maybe elaborate on the feature parity?

    1. I travel often. There are a lot of devices in hotels, bnbs, and friend's houses that have native plex support. Not so much for jellyfin.
    2. Casting to cast-compatible devices is very hit-or-miss, but mostly miss. I know the casting ecosystem is already a mess, but as far as user experience goes, Plex has spent more effort ironing it out.
    3. The native Plex client works with a controller on my bazzite HTPC when launched from the steam ui, while the native jellyfin client doesn't.

    I keep trying jellyfin out every few months, but so far keep hitting enough friction that I can't reliably make the switch.

    as in separate jellyfin account per each different jellyfin server?

    Yes, if me and 5 of my friends have jellyfin servers, we all need accounts on each other's servers. I then need to juggle accounts to access their content.

    Jellyswarrm is a reverse proxy plugin I could run to mask the problem for myself, but it's not a solution for mom who may have access to my server, and one other friend's server that I don't know.

    The correct solution is federated accounts, but the devs have already stated that they don't want to do that.

    Why would you host it openly rather than in a VPN like Tailscale or whatever wire guard is?

    Then friends and family have to be on my VPN to stream anything.

  • Plex’s price hikes prove I was right to switch to Jellyfin

    Jump

  • To me this means they know they don't have a viable business model. It's possible they took on a lot of debt years ago, and now they have to enshittify to pay it back. I paid for the lifetime membership years ago, and I would say I've more than gotten my money's worth and I'm mostly still happy with Plex, but I would drop them in a heartbeat if jellyfin was a viable alternative.

    People don't like to admit it, but jellyfin doesn't have feature parity yet. I think they could solve a lot of the issues if they went the federation route, but until then, it's just easier for my family and friends to each have 1 plex account instead of N jellyfin accounts. Not to mention the jellyfin vulnerabilities that prevent me from considering hosting it openly.

  • How to not loose important documents?

    Jump

  • I have a TrueNas system locally with periodic cloud sync jobs to backblaze B2.

  • Selfhosted @lemmy.world
    teawrecks @sopuli.xyz

    Using Immich in combination with NAS permissions