you’re not particularly worried about “someone”, you’re worried about bots that are scanning IP ranges and especially default ports. A lot of people will install a program, not really understand what it does, and forward a port because the setup told them to. Then proceed to never update the program (or it’s a poorly secured program in the first place).
reddit: nico_is_not_a_god pokemon romhacks: Dio Vento
- 0 Posts
- 74 Comments
if they got in…
You’re trusting Jellyfin to not have some form of privilege escalation attack available. I’m not saying they do have one or that anyone’s exploiting it in the field, but yeah. Also if your Jellyfin admin account is allowed to download subtitles to content folders, a “just fuck shit up” style vandal-hacker could delete your media probably. If you mount the media read-only that wouldn’t be a concern.
Do note that without that layer you were using Pangolin for, your system might be compromised by a vulnerability in Jellyfin’s server or a brute force attack on your Jellyfin admin account.
Everyone I know that actually keeps backups has the same kind of story. It’s sad that no matter how many other people talk about keeping backups, it always takes a tragic loss like this to get people to buy hardware/subscriptions.
pory@lemmy.worldto Selfhosted@lemmy.world•TubeArchivist alternatives that store data in an archive friendly manner?English1·2 days agoI settled on Tubesync. Pinchflat mysteriously stopped downloading new vids from a playlist I had it monitor. Surely I could have fixed it by checking logs or whatever but Tubesync has the exact same feature list and no downsides, so I just killed my pinchflat container and spun up tubesync.
Can “your apps” access it when their device isn’t on your home LAN?
pory@lemmy.worldto Games@lemmy.world•Blue Prince - Have you played it? How blown is your mind?English1·15 days agoGame of the year. Also, if it didn’t have the RNG component, it would be a worse game. A puzzle game that inherently prevents you from stubbornly blundering down one thread is genius design, the fact that the house forces you to look at rooms you aren’t looking for leads to so many natural “aha!” moments and encourages you to be actively tracking multiple story/puzzle threads at once.
So few puzzle games care about also being good games, and I can confidently say that if Blue Prince didn’t have the excellent roguelite-inspired gameplay loop at its core I’d have dropped it without even giving it a chance. Giving you “stuff to do” as you process the lore and puzzle hints is the secret sauce. The game’s themes of inheritance tie in perfectly to the strategic mastery curve of learning how to influence the manor. Having a source of “payoff” emotions other than “solving a puzzle” keeps the moment to moment gameplay fresh, and if you’re playing it for long enough that stuff like allowance tokens and stars stop feeling like rewards, you’ll also have access to so many luck-mitigating tools that I can confidently say it’s a skill issue if you’re still fighting the drafting system.
The natural progression from “the objective is to wrangle the house into giving me what I KNOW i want” to “the house is just like this, and I can search it to find new things to want” to “I know how to make this house sing” is perfectly executed ludonarrative harmony. You learn the rooms so much better when you’re forced to walk through them on consecutive days. Upgrades and rarity tweaks give you so much power. The drafting system isn’t a barrier to you solving puzzles. It’s a strategy game that you can be good or bad at. And a lot of people that are frustrated at that system’s existence are refusing to treat it as something you can get good at. It’s a Dark Souls boss fight - practice with intentionality, explore solutions and ideas, fail frequently, learn from failure, be rewarded with mastery.
People just aren’t receptive to the idea of “challenge” in a game that isn’t precision timing or stat sheet optimizing. The house mechanic of Blue Prince is a relatively challenging strategy game, and part of the challenge is recognizing how to interface with it at all. A lot of people come to the game ready for challenging puzzles but not a strategy game, and for those BP will feel like “RNG getting in the way of my puzzle solving”. That’s fair, but I’d liken that attitude to coming into Elden Ring and complaining that all these boss fights are in the way of the lore. Strategy games might not be your thing, and maybe you didn’t know BP would be one, and that’s okay. But for those that like challenging strategy games and intricate puzzles, there’s nothing quite like Blue Prince.
pory@lemmy.worldto Games@lemmy.world•Apple blocks Fortnite's return to iPhone in USEnglish331·1 month agoI’d take an Apple loss over an Epic one any day here. Apple’s walled garden philosophy has permanently damaged the tech literacy of an entire generation, and the fact that ~half of all people that want to use a smartphone to do things simply can’t just install a FOSS application downloaded from Github to do the thing is an atrocity. Apple getting away with it also emboldens Google to make their phones/tablets into “gadgets” instead of “computers” with stuff like file permissions policies (that became so restrictive that the devs for Syncthing simply gave up on Android as a platform).
Meanwhile, Epic’s greatest evil that affects me is that I don’t play some video games because they’re exclusive to Epic’s store, and also some video games are worse because it “just makes too much financial sense” for AAA devs to release UE5 slop. Operating systems and programs are more important than video games, and video games as a medium are more restricted by stuff like what Apple’s doing than what the AAA devs do to generate shareholder value.
pory@lemmy.worldto Games@lemmy.world•Youtuber Geekerwan has find the motherboard of Switch 2 and after reverse-engineer he have simulate the performance on a similar PCEnglish5·2 months agoWith a phone, there’s a type of controller that wraps around the phone, turning it into a Switch form factor. That’s probably the middle ground between atrocious touchscreen d-pads (or only playing games that actually work well with touch controls) versus lugging around a Dualsense and some mount contraption or kickstanding your phone on a surface.
pory@lemmy.worldto Selfhosted@lemmy.world•That's all folks, Plex is starting to charge for sharingEnglish41·2 months agoServer costs? Plex’s serverside only handles auth and verification. Once the client connects to the server, any media is sent peer to peer. There’s no stage where the video goes “to plex” or “from plex”. Saying plex needs to charge a sub fee to make up for bandwidth is like saying qbittorrent should do the same.
Unless you’re talking about the content Plex serves, the ones you have to walk every user of your Plex server through deleting from their apps’ homepage.
pory@lemmy.worldto Selfhosted@lemmy.world•That's all folks, Plex is starting to charge for sharingEnglish71·2 months agoI dunno about that. Plex has lots of market share and plenty of “well I bought the pass when it was $60/$90” people aren’t gonna be personally affected by them locking more and more functionality behind the pass. So they’ll keep using it and recommending it and talking about it, and the centralized account management stuff (which Jellyfin won’t copy, because not having that is the point of selfhosting) will always be more convenient than setting up VPNs or other tools like external auth for Jellyfin sharing over the internet.
Discourse about this everywhere always boils down to the same comment: “I bought the plex pass and honestly I’d do it again for $300 just to not deal with handling my own authentication system, plex remote play Just Works”. Or something like “I refuse to use a $20 HDMI android TV box instead of my ad-ridden smart TV or PlayStation 5, and those don’t have apps for JF”. These guys are literally in this thread, on Lemmy, the Reddit for people so FOSS-friendly they use Lemmy instead of Reddit.
pory@lemmy.worldto Selfhosted@lemmy.world•That's all folks, Plex is starting to charge for sharingEnglish2·2 months agoYes, that is correct. It’s because the people that read the email only, or read the email and click one (1) link, are likely to be less familiar with Plex as a platform than the server owner. Plex the company would very much like people to pay them $7 a month forever for literally nothing.
pory@lemmy.worldto Selfhosted@lemmy.world•That's all folks, Plex is starting to charge for sharingEnglish4·2 months agobut it’s not, because “i got it so cheap for $60 ten years ago / $90 five years ago / $120 yesterday” and “securely opening a port and enabling OAuth for jellyfin takes more than one click”.
The “lifetime” Plex Pass was a genius marketing move, because people are permanently inertia-locked into the cost they sunk. For nearly a decade now the refrain is “I just have a Plex pass. I bought it for $30 less than its current cost and it works great for me, sucks that it’s now $90/$120/$240 but IMO it’s worth it :)”. Don’t forget that making you pay $60 or $90 or $120 or $240 to use your own GPU for hardware encoding was always a scumware tactic, even if they put up a $15/mo subscription next to that one-time cost so that the one-time cost looks like “a good deal”.
pory@lemmy.worldto Selfhosted@lemmy.world•That's all folks, Plex is starting to charge for sharingEnglish6·2 months agoIt’s scummy advertising, yes. Designed to prey on a Plex server operator’s likely-less-tech-literate users.
pory@lemmy.worldto Selfhosted@lemmy.world•That's all folks, Plex is starting to charge for sharingEnglish11·2 months agoYes, they’re being advertised to. In theory this is because they might be clients for non-Pass servers in addition to yours. In practice, Plex could easily verify Plex client accounts that don’t run a server or have access to non-Pass servers and skip sending this marketing email to those accounts. What they’re doing is trying to convince your users they need to pay a sub fee (even though they don’t), because it’s free money in Plex’s pocket if the users do click the thing and say “welp, still cheaper than netflix”
Any users of your plex-pass verified server do not need to pay anything to keep streaming it. You had to pay a lot more for the lifetime or subscription to enable it, but by doing so any users you share with don’t need to pay a dime. You reading this press release and seeing your users get emails and assuming that your users now need to pay for something isn’t you being stupid, it’s the intended result of their deliberately confusing messaging. One user shrugging and saying “guess it’s $7/mo now” is free money for the company.
pory@lemmy.worldto Games@lemmy.world•I want a law for PC games to be offered in physical versions againEnglish2·2 months agoCDs and DVDs are digital media. There is no degradation of the content when you convert a fragile physical disk into a dumped ISO, and the dumped ISO can be stored on an arbitrarily large number of devices. Stuff like physical books or analog media (vinyl records, for example) are worth caring about physical degradation for, but a “physical copy” of a PC software disc is just a more fragile way to store the exact same ones and zeroes that can be stored on actually resilient media.
pory@lemmy.worldto Games@lemmy.world•I want a law for PC games to be offered in physical versions againEnglish91·2 months agorelease installers DRM-free online. No need to bother pressing plastic and wrapping it in plastic and wrapping that plastic in thinner plastic and then putting it in a box full of plastic to ship around the globe on giant cargo ships, to be ferried from the docks by big-rig trucks, to be stacked on palettes that get wrapped in more plastic, to sit on store shelves or the shelves of some amazon warehouse where they’ll get wrapped in more plastic and shipped in more trucks, so that you can pay the middleman store instead of the developers, all so that you can install the files to your SSD anyway. And if this physical media is DRM-free you could just make backups instead of holding onto the plastic… or skip the part where the plastic exists in the first place, and download the files over the internet, right to your computer, without any trip to a gamestop or stop on an Amazon driver’s daily route! And if it’s not DRM-free what was even the point of all that plastic and gasoline that got it into your hands when you need to verify the purchase with an online key anyway?
GOG, Itch, and even Steam all have large catalogues of completely DRM-free games, to say nothing of developers that don’t distribute via a storefront platform. Once you download the game, provided you don’t delete it, your copy of the game will survive the distribution platform dying, the developer being bought out by EA, licenses expiring for content, the devs patching it to make it worse, or even (if you make backups) your house burning down.
Nintendo’s out here trying to justify $90 mario kart because of the “rising cost of developing games”, meanwhile probably more than half of the new mario kart’s sales are going to lose huge amounts of revenue because Nintendo has to pay manufacturers and shippers and storefronts to move and hold onto plastic and circuit boards that are just glorified read-only flashdrives for 32GB of media. It’s been a joke that digital games have been the same price as their physical counterparts ever since companies started selling digital copies in the first place.
pory@lemmy.worldto Games@lemmy.world•Skyblivion fan project lead reacts to Oblivion remake news with "all love and no hate"English1·2 months agoAs long as spellcasting is still good and spellcrafting is still in. Magic was a complete joke in Skyrim and not just because it was terrible DPS compared to swords and bows. The spells were all so boring.
Just not buying something isn’t a boycott. Don’t buy bad games, and it’s a good idea to include dark patterns in the criteria for what makes a game bad.
A second device on site is still infinitely more resilient than just letting it rock. Most use cases where a backup would help can be covered by an occasional one way sync or scheduled copy to a USB drive. Offsite is for catastrophes like your home burning down or flooding.