Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)DA
Posts
3
Comments
1,275
Joined
1 yr. ago

  • Bikes are the apocalypse ideal vehicle. They are immensely underrated on apocalyptic media.

    Fuel I need to constantly scavenger? No thanks.

    Noise that would attract the zombies? No thanks.

    The highway is collapsed and my RV cannot go through? No thanks.

    A bike would get you quite good through many apocalyptic scenarios.

  • According to Lemmy poor people who have done not harm to others have the same morals that poor people that hurt others.

    I personally know a homeless person that have never steal or hurt. And several poor people with homes but small income that have stab and stolen other people, probably justifying their shit behavior in being poor.

    According to some out of touch lemmings those two people are morally equivalent.

    Being poor doesn't justify being a shit person. And defending that is insulting to honest and moral poor people.

  • According to Lemmy all poor people are good.

    Tell that to Juan, the homeless I personally know that has not done anything bad, and have been always an angel. He had never hurt or steal anyone and he doesn't even have a roof over his head.

    But according to Lemmy shitheads that kill, steal and rape have the same moral merit as Juan because they are not rich.

  • People is bad or good. Money don't have that much factor in that. It only changes the type of "bad things" you do, but bad people will do bad things and good people will do good things.

    Don't fall for the sentient sentiment that all poor are good and all rich are bad, or that all rich are good and all poor are bad. Because that doesn't correlate with really.

    Yes, maybe a poor bad fella will stab you, while a bad rich guy will deny your medical insurance. They both are taking your life, different approaches to evilness due different disposable income available to do evil shit.

  • We already have power in my city. I think most of Spain is already up. But some cities still down, I think Madrid is still having issues as I have not been able to contact people from there.

    Cause still unknown.

  • IP addresses are fairly public.

    In order to get that kind of infection there need to be a serious vulnerability. None of the services I expose have those kind of vulnerabilities, and I keep them updated.

    A Zero-day may be possible, but it can happen with any software.

    Any way, even if some of my services got infected that way, I have them all in docker containers. If they managed somehow to insert any malicious software it would have disappeared in the next restart of the container.

    And in order to have a software that breaks out of the container it would need to also have some sort of zero-day docker exploit. Two zero-days needed for accomplish that...

    Every expose software I have is running on a caddy reverse proxy. And caddy is the only authorized author on my firewall so it gets more difficult to try to run an unexpected malicious software through it.

  • I don't think jellyfin vulnerabilities could lead to a zombified machine. At least I've not read about something like that happening.

    Most Jellyfin issues I know are related to unauthorized API calls of the backend.

  • I have had jellyfin exposed to the net for multiple years now.

    Countless bots probing everyday, some banned by my security measures some don't. There have never been a breach. Not even close.

    To begin with, of you look at what this bots are doing most of them try to target vulnerabilities from older software. I have never even seen a bot targeting jellyfin at all. It's vulnerabilities are not worth attacking, too complex to get it right and very little reward as what can mostly be done is to stream some content or messing around with someo database. No monetary gain. AFAIK there's not a jellyfin vulnerability that would allow running anything on the host. Most vulnerabilities are related to unauthorized actions of the jellyfin API.

    Most bots, if not all, target other systems, mostly in search of outdated software with very bad vulnerabilities where they could really get some profit.

  • You can share jellyfin over the net.

    The security issues that tend to be quoted are less important than some people claim them to be.

    For instance the unauthorized streaming bug, often quoted as one of the worst jellyfin security issues, in order to work the attacker need to know the exact id of the item they want to stream, which is virtually impossible unless they are or have been an authorized client at some point.

    Just set it up with the typical bruteforce protections and you'll be fine.

  • Street piracy vendors (AKA in my country as "top manta").

    They used to be everywhere selling pirated copies of games and movies. As internet popularized they went back to selling questionable trademark infringing clothing.