Just a lvl 28 guy from Finland. Full-stack web developer and Scrum Master by trade, but more into server-side programming, networking, and sysadmin stuff.
During the summer, I love trekking, camping, and going on long hiking adventures. Also somewhat of an avgeek and a huge Lego fanatic.
That’s cool. I’m sorry if it came across like I was criticizing your live stream, that wasn’t my intention. I just wanted to add the link to the actual event since it was missing from your post.
And now that you mention it, it is cool to have the whole event (or at least most of it) available as a VOD, if someone wants to put together more timelapses for example.
It allows you to easily list users who upvoted or downvoted a post or comment. Most people don’t realize their votes are public, as Lemmy doesn’t display voters anywhere in the UI. The tool sparked quite a bit of debate when it was released, most of it unnecessary in my opinion as instance owners/admins, community moderators, and users of non-Lemmy software (like Mbin) can see vote information regardless.
Downloading VMware Workstation from Broadcom. They made it free but they definitely didn’t make getting it easy. What’s worse, in-app updates have been broken since Broadcom takeover, meaning you need to navigate their shitty website every time you want to update.
Every account on reddit fediverse is a bot except you.
Jokes aside, I haven’t noticed anything. I don’t really see what would anyone gain by setting up bots posing as real humans. Especially on Fediverse. I’m not saying it’s never happening but I don’t think it’s very common.
Umm… Why would anyone watch the live stream as they can literally watch it live at https://canvas.fediverse.events/
https://en.wikipedia.org/wiki/Yukigassen
https://en.wikipedia.org/wiki/COVID-19_lockdowns
https://en.wikipedia.org/wiki/Viking_Age
https://en.wikipedia.org/wiki/The_Terminal
https://en.wikipedia.org/wiki/Legality_of_cannabis
https://en.wikipedia.org/wiki/Yellow_cab
https://en.wikipedia.org/wiki/Maximum_wage
https://en.wikipedia.org/wiki/Gulf_Air_Flight_072
https://en.wikipedia.org/wiki/Debian_version_history
https://en.wikipedia.org/wiki/Empire_of_the_Ants_(novel)
I only included pages from the English Wikipedia. There was quite a few visits to Wikipedia in my native language too.
Nothing major, but I have two stories that have stuck with me. I’m not superstitious or anything, and obviously these are just coincidences, but it’s interesting how the human mind loves finding connections between things even when there aren’t any.
One morning in 2020, during the covid lockdowns, I woke up to the sound of a small bird pecking at my bedroom window. It was really going at it and wouldn’t fly away even after opening the blinds. For some reason, I wanted to take a picture of it, and just as I grabbed my phone, it rang and I got the news that my grandmother had passed away during the night. Right then, I noticed the bird flying away. My partner at the time insisted it was my grandma saying her final goodbyes. While I don’t believe that, the memory of that moment has stuck with me, and it still makes my eyes water a bit.
The second incident also involves a bird, funnily enough. A friend and I were driving to a national park for an overnight hiking trip when we accidentally drove over something on a small forest road. I didn’t see it, but my friend said it looked like a small bird. I wanted to stop and check, but my friend, who was driving, just kept going. I jokingly said something like "Now we have bad karma, and the whole trip will get ruined somehow.” And would you know it, that very same day an unexpected heatwave hit the area, making the entire hike pretty miserable. This has become a running joke between us, every time we go hiking, we joke about how everything will go fine, as long as we can get there without running over anything on the way.
Yeah, just checked the price myself too. $120 is just robbery. I hope 3rd party manufacturers will figure out how to make their stuff work with Switch 2.
While I don’t support them doing it, I’m a bit out of the loop on why third-party docks are even needed? What’s wrong with the original dock? I’m genuinely curious, I had Switch 1 for 5+ years and it never occurred to me to even look at any third-party docks.
Thanks. This is kinda important info so I’ve edited my initial comment.
They are not saying anything on why they are removing it.
Jellyfin is dropping HTTPS support with a future update[…]
What’s the source for this? I wasn’t able to find anything with a quick google search
I see everyone in this thread recommending a VPN or reverse proxy for accessing Jellyfin from outside the LAN. While I generally agree, I don’t see a realistic risk in exposing Jellyfin directly to the internet. It supports HTTPS and certificates nowadays, so there’s no need for outside SSL termination anymore. (See Edit 2)
In my setup, which I’ve been running for some time, I’ve port-forwarded only Jellyfin’s HTTPS port to eliminate the possibility of someone ending up on pure HTTP and sending credentials unencrypted. I’ve also changed the Jellyfin’s default port to a non-standard one to avoid basic port-scanning bots spamming login attempts. I fully understand that this falls into the security through obscurity category, but no harm in it either.
Anyone wanna yell at me for being an idiot and doing everything wrong? I’m genuinely curious, as the sentiment online seems to be that at least a reverse proxy is almost mandatory for this kind of setup, and I’m not entirely sure why.
Edit: Thank you everyone for your responses. While I don’t agree with everything, the new insight is appreciated.
Edit 2: I’ve been informed that infact the support for HTTPS will be removed in a future version. From v10.11 release notes:
Deprecation Notice: Jellyfin’s internal handling of TLS/SSL certificates and configuration in the web server will be removed in a future version. No changes to the current system have been made in 10.11, however future versions will remove the current system and instead will provide advanced instructions to configure the Kestrel webserver directly for this relatively niche usecase. We strongly advise anyone using the current TLS options to use a Reverse Proxy for TLS termination instead if at all possible, as this provides a number of benefits
What if a bad actor acquires one of these once popular tracker domains? Could they somehow take advantage of it? For example, what if they make the tracker advertise a large number of “fake” peers that serve malware instead of the actual files? I only have a crude understanding of how BitTorrent works, so I’m not sure what kinds of protections, if any, it has against this type of attack.
He would be the perfect host for the show
As someone living in a green country, could someone explain how things work in practice in the yellow or orange countries? I understand that in places like Russia or China, journalists can end up in prison, or worse, if the government doesn’t like their writing. But how exactly is the press not free in countries like Canada or most European nations that are labeled yellow here?
And why is the US labeled orange? As far as I know, the media there is highly politically polarized, with most major news organizations openly supporting a particular agenda. That’s certainly a serious issue and not how the press should operate, but even Trump’s government isn’t actively limiting the freedom of the press to report on issues like they see fit? Or am I mistaken? I’m genuinely asking.
That’s reassuring to know. What I don’t understand is why you have the /api/v3/post/like/list
route. You say you don’t want votes to be snooped on, but then you add an endpoint that makes it very easy for instance admins to do exactly that if they choose to? Also worth pointing out that the tool linked here wouldn’t work in its current form if this route didn’t exist.
Compare your actions to releasing a 0-day exploit for a security vulnerability instead of responsibly disclosing. It doesn’t help, it just causes chaos until the people who do the actual work can figure out a solution.
This comparison is not fair at all. It’s not like the devs are unaware of this. They could start by removing the API endpoint that lists a post’s votes, but they haven’t, which means they seem to think it’s okay for the instance admins to snoop on votes if they so wish.
Oh, I agree. This change will affect all CAs however. And their post seemed to contain the most amount of information.
Oh wow, I didn’t know abot his backstory. Oblivion and Skyrim would probably be very different games if he hadn’t survived that accident.