26
Jellyfin 12.0 (jellyfin.org)
submitted 1 month ago by ticoombs@reddthat.com to c/kodi@reddthat.com
3
2
5
9

A word on limitations

Little Snitch for Linux is built for privacy, not security, and that distinction matters. The macOS version can make stronger guarantees because it can have more complexity. On Linux, the foundation is eBPF, which is powerful but bounded: it has strict limits on storage size and program complexity. Under heavy traffic, cache tables can overflow, which makes it impossible to reliably tie every network packet to a process or a DNS name. And reconstructing which hostname was originally looked up for a given IP address requires heuristics rather than certainty. The macOS version uses deep packet inspection to do this more reliably. That's not an option here.

For keeping tabs on what your software is up to and blocking legitimate software from phoning home, Little Snitch for Linux works well. For hardening a system against a determined adversary, it's not the right tool.

I like this.

9

It could be worse... People could use Azure sign in for securing their infrastructure! #joke

4

Massive French Torrent Tracker that earned 5-8 Million Euros per year has been leaked.

1

Hey #WebComics ,

We'd like to have a moderator who can keep the webcomics community alive and give it a nice refresh.

Please comment here (&/or send me a PM directly) if you wish to become a mod :) .

Thanks,

Tiff

19
12

Via Wayback machine as their site got hugged to death by Hacker News. But some lovely pictures people made on their internet connected thermal printer

3
2

Note by PHRACK STAFF:

A responsible disclosure was attempted to warn South Korea that China/North Korea has hacked them. The full article, dump and release schedule was shared with South Korea before it was published:

16th of June 2025, Informed Defense Counterintelligence Command.
26th of June 2025, Anonymous response from clearbear001 (dcc.mil.kr?).
16th of July 2025, Anonymous response from operation-dl (who is this?).
17th of July 2025, Informed KISA.
17th of July 2025, Informed Ministry of Unification.
17th of July 2025, Informed LG Uplus Corp.
18th of July 2025, Informed KrCERT.
1st of August 2025, Communication then ended abruptly.
14th of August 2025, The author received an ominous message via Signal, advising him that Proton is not secure (using a burner-phone). (Noticeable: The contact knew about “notfox”, a handle only shared with the South Korean government. Why the contact???).
15th of August 2025, Proton disables the whistleblower’s email account.
16th of August 2025, Proton disables the author’s email account.
18th of August 2025, The complaint fails. The appeal fails. Proton’s response: “your account will cause further damage to our service, therefore we will keep the account suspended”.
22nd of August 2025, Phrack vigorously tries to contact Proton-legal, Andy, and others at Proton. No response.
6th of September 2025, Phrack gives Proton 48h notice: Please respond, or we will try to reach you via social media.
9th of September 2025, Phrack reaches out to Proton on social media.
10th of September 2025, Proton re-enables both email accounts.

The email account was only used to communicate with South Korea. No ToS was violated. No crime was committed.

We trust that Proton will fix the appeal process and become more transparent. Don’t give up on Proton just yet.

So far Proton has not answered our emails or taken our calls. We wish to communicate and work this out together. This is not our first rodeo.

We thank the community for their support and courage.


Very interesting story.

Considering the time lines with the current ongoing S.Korean fires.

[-] ticoombs@reddthat.com 13 points 1 year ago

Oops! Sometimes we admins like to joke around!

[-] ticoombs@reddthat.com 107 points 1 year ago

Hey! Sorry for the joke, I didn't expect it to be seen by a real user!

As we are one of the very few instances that has a no email policy there is very few ways in which we can determine if a person signing up is a bot or a regular user.

Recently a very very specific person or group of people have been abusing Reddthat to create accounts, then ask interesting questions (let's just say that), and then proceed to delete their account (which deletes all of their posts and comments). This makes it impossible to figure out what they have done unless someone quotes the reply or reports it before they delete it.

I'm sorry you got caught up in the little bit of fun us admins have with writing little anecdotes or fun catch phases!

You are welcome to come say hi on Reddthat any time!

[-] ticoombs@reddthat.com 19 points 1 year ago* (last edited 1 year ago)

Looks easy : https://www.ifixit.com/Guide/Steam+Deck+SSD+Replacement/148989

Edit: Is it worth 30-60minutes of your time, the screwdrivers, maybe the spatchula, and reinstalling steamOS onto the drive?

[-] ticoombs@reddthat.com 13 points 2 years ago

Thank you for the update and it's good to hear your upcoming plans. Being one of those people in Australia (Reddthat) it will be good to see if it actually works as it's designed too!
I'd love to save $7/m to not have a server dedicated to batching the federation traffic 😅

When you lay out the timelines for 0.19.3 onwards no time at all has gone by, and having to deal with the issues after .3 has certainly not been fun as an admin. (And I'm only a small server compared!)
Being such a huge player in our Lemmyverse, thanks for taking the time to plan this out as I know how much testing has been done to get us this far.

It's always a nice experience chatting to the LW team!
Hope your updates go smoothly!

[-] ticoombs@reddthat.com 16 points 2 years ago

This is sso support as the client. So you could use any backend that supports the oauth backend (I assume, didn't look at it yet).

So you could use a forgejo instance, immediately making your git hosting instance a social platform, if you wanted.
Or use something as self hostable like hydra.

Or you can use the social platforms that already exist such as Google or Microsoft. Allowing faster onboarding to joining the fediverse. While allowing the issues that come with user creation to be passed onto a bigger player who already does verification. All of these features are up for your instance to decide on.
The best part, if you don't agree with what your instance decides on, you can migrate to one that has a policy that coincides with your values.

Hope that gives you an idea behind why this feature is warranted.

[-] ticoombs@reddthat.com 11 points 2 years ago* (last edited 2 years ago)

Relevant: https://reddthat.com/comment/8316861 tl;dr. The current centralisation results in a lemmy-verse theoretical maximum for of 1 activity per 0.3 seconds, or 200 activities per minute. As total transfer of packets is just under 0.3 seconds between EU -> AU and back.

Edit: can't math when sleepy

[-] ticoombs@reddthat.com 21 points 2 years ago

It's a sad day when something like this happens. Unfortunately with how the Lemmy's All works it's possible a huge amount of the initial downvotes are regular people not wanting to see the content, as downvotes are federated. This constituted as part of my original choices for disabling it when I started my instance. We had the gripes people are displaying here and it probably constituted to a lack in Reddthat's growth potential.

There needs to be work done not only for flairs, which I like the idea of, but for a curated All/Frontpage (per-instance). Too many times I see people unable to find communities or new content that piques their interest. Having to "wade through" All-New to find content might attribute to the current detriment as instead of a general niche they might want to enjoy they are bombarded with things they dislike.

Tough problem to solve in a federated space. Hell... can't even get every instance to update to 0.18.5 so federated moderation actions happen. If we can't all decide on a common Lemmy instance version, I doubt we can ask our users to be subjected to not using the tools at their disposal. (up/down/report).

Keep on Keeping on!

Tiff - A fellow admin.

[-] ticoombs@reddthat.com 12 points 2 years ago

I chose poke bugs. And look where I am now!

[-] ticoombs@reddthat.com 12 points 3 years ago

If you don't see create community in the top next to create post, then your home server doesn't allow users to create community

No. You have to have an account on that server. (And have to use that account regularly as well, otherwise you won't see reports about your community)

You make posts.

[-] ticoombs@reddthat.com 23 points 3 years ago

Don't forget & in community names and sidebars.

Constantly getting trolled by &

[-] ticoombs@reddthat.com 11 points 3 years ago
view more: next ›

ticoombs

0 post score
0 comment score
joined 3 years ago
MODERATOR OF