Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)L
Posts
5
Comments
587
Joined
3 yr. ago

  • I hear this a lot but I've never been able to get concrete examples. I don't notice any inconsistency with my system or any of its applications, I don't have issues with misaligned icons although I'm not sure where we are even talking about there's a lot of places that icons exist. But on the task bar notification tray and within the file browser I don't notice any misaligned icons anywhere.

    I suppose I can't speak for the entire fleet of KDE software as to be perfectly honest I don't use much of it, that's kind of the joy of linux is you aren't locked into a particular ecosystem and I have found that the only KDE applications I really make use of is dolphin, Kate, Krita, and kcalc. Outside of that i have things like mpv for video, clementine for music, etc. Hell i use gnome disks for making bootable flashdrives i really like it easy just apply an image click go sure I could do it with DD in the terminal and sometimes I do but it's nice to be able to just right click context menu an ISO and write it to the flash drive.

    I don't really see the need for all my applications to be unified under a very specific theme or design philosophy in fact I generally prefer that they don't. It often creates applications that have limitations or other problems for the sake of maintaining the design philosophy. I want a program that does a thing and does it very well regardless of how it may lay that out. but I suppose for some people a cohesion between different tasks is important and thats fine too, i just don't really understand it for myself

  • I've had in depth conversations with people on both sides of the fence and really dug down and made them explore and explain the why for either side.

    What I found is that it boils down to whether or not you are fine with doing some initial setup. People who love KDE almost never use the OOTB configuration it is pretty much guaranteed that they have every intention of customizing the interface whether that's through themes changes in layout or add-ons that bring entirely different workflows. Almost every instance of a KDE desktop is unique when you dig into it.

    People who love gnome do not want to configure anything ever, they are happy with the workflow as it is out of the box and thus happy with the environment. At the end of the day you can make KDE look and behave almost exactly like gnome, but if gnome already fits your desired work flow why bother? When you get the people that use gnome but do have complaints it's usually that there's only like one or two things they wish they could change slightly so it's not worth going to KDE and configuring everything to be how they want.

    I fit into the first camp, i love KDE specifically because I can change virtually any piece of it to be exactly how I want. I do not use the out of the box configuration, I make a number of changes they are not major ones I get rid of the floating taskbar because I think it looks stupid like my graphics driver is broken or something, i make changes to the layout of the file explorer I make some context menu changes here and there change the theme change some things about how the windows behave. overall i don't think you would immediately notice sitting down at my computer if you were used to kde you would just discover things that broke your muscle memory as you went.

  • me_irl

    Jump
  • I love posts like these because it's posted by people that absolutely won't actually do that. They likely consume tons of products currently using AI in ads

    To be clear, fuck AI. But that doesn't make it less stupid/funny

  • The nginx rce relied an a series of requirements that affect almost nobody. You had to be using a very specific module and processing a specific type of data reverse proxy was not affected.

    But regardless I get your point that anything can have an RCE. However as you say at the end in principle that does not mean you should just give up and expect external projects to handle your security. VPN is a great way to access your services and it is good defense and depth, but for the sake of being a successful project to the masses? It's basically a dead end Road

  • Actually, i mentioned the memory leaks as it's been a consistent issue for years now. Again normal people cant and won't setup special containers with memory limits as a crappy work around.

    You may not like that i don't blindly glaze jellyfin because it's open source. However I'm just being realistic about what it needs to actually be a viable replacement for plex for the masses.

    It needs to be able to match media properly, it still struggles with this even when you go out of your way to make sure the media is named in the exact manner the documentation dictates. It needs to be able to be used remotely simply through the web, having to set up a VPN is not a viable approach, it needs to be able to function long-term without eating up all the system's memory and requiring regular restarts to prevent it from going out of control. Subtitles need to work on all clients, as it stands right now Roku subtitles are non-functional like 80% of the time no matter what you do, some TV browsers struggle with it as well.

    I am sorry that that upsets you, but it is the reality and it is the reason the projects like these tend to mostly be used by the technically inclined. Including myself, I was able to put it in an unprivileged secured lxc container, so that I could use it through the web and set memory limits, but most people cannot and will not do that. I would prefer to see it be successful and be able to tell everyone never touch Plex again, but I know that telling people it's ready to go while it has a myriad of basic issues is not helpful.

  • I am right there with you on the docker hate I get the idea but the docker system itself is a huge problem. The amount of people that do not realize it completely bypasses system firewalls is very sad and unfortunate and leaves a lot of people vulnerable.

    I personally try to use lxc containers that I set up myself for containerizing services and install them natively within the container

  • Ok? I will take it like it is. Jellyfin is a flawed product not currently suitable to replace Plex for the average person and is only particularly usable by technically inclined users capable of protecting themselves through VPN or other means. As well as dealing with things like failed matched media and memory leaks that are frequent.

    That is how it is, and that's how I've been taking it from the start.

  • Once? No jellyfin has had about 4 major RCE issues since the fork. At least 4 that I'm aware of. Blaming it on the previous code only makes sense if the split is recent. They have had time to completely rewrite if they really want.

    I'd like to see plex die entirely, but I know too many less technical people that use it . They are not going to set up a VPN , end of story end of discussion. And I'm not going to tell them to use jellyfin when it will likely continue to have major security issues and could compromise their systems. I have no doubt that Plex leadership is fully aware of this, they know that even with them pushing more subscriptions and higher costs they are going to continue to have users because the alternatives are just not able to keep up and are not viable for the average person just the technical users which they would have lost to alternatives regardless

  • That would be the case, however the devs official stance is it's unsafe and should not be used other than over vpn. So they also agree

  • It has had a pretty high number of RCE exploits including one recently the architecture of the web service is just very poor and leads to a lot of basic problems.

    Personally I am not a fan of the language they chose, and I think it directly leads to a lot of these problems but that's just like my opinion man.

    The server itself also has tons of issues like the constant memory leaks that cause it to eat up endless amounts of memory that they don't seem interested in fixing and basically once again push it to the users to deal with and a bunch of the boot lickers are like yeah you just need to put it in a Docker and limit its maximum memory as if that's just normal and expected to need to do

  • I am aware that an rce is the worst possibility I'm saying it shouldn't be. The web portion is already its own isolated binary that you have to install but it's designed with seemingly very little attention to security.

    To the point that jellyfin has already had several major RCE and despite having full support for running over the web with http developers are basically just like you should not be using this without a VPN which is overall a pretty pathetic stance for a media server

  • This is the most hilarious lie I think I've seen in a while from open source on here. To be clear I use it as my daily driver, I switched off Plex a long time ago when I saw the writing on the wall.

    But I still have issues with media matching to this day, issues where subtitles on certain devices just refuse to display no matter what you do. And the server still loves to randomly take up absolutely massive amounts of memory for seemingly no reason whatsoever I ended up making a strip to just forcibly kill it and restart it every 12 hours to prevent it from eating the entire system's memory.

    And no my file naming is not the media issue everything I do is properly named exactly as jelly fin documentation says it wants by sonarr. Not to mention you are expected to maintain a VPN system just for accessing your media away from home as the web interface is so hilariously unsecured as to be a constant source of major system vulnerability.

    It's usable, but it's not as just works as Plex I have thousands of TV shows, anime, and movies as in thousands of each of those categories and Plex never once failed to match to the correct media, never had a problem just playing subtitles on any client, and I think only ever had one major issue with the web interface in terms of security? There's been lots of minor ones that would give people essentially just access to Plex but not the underlying system

  • The fact that's needed at all is the problem. Developers need to stop making monolithic structures that have access to everything ever and putting it on the user to maintain to maintain a VPN network for security.

    There's no reason I should not be able to just use an nginx reverse proxy for remote access to my jellyfin and have that be safe. It should at worst give people a copy of my media if there's a security issue.

    Personally I went out of my way to make this be the case, i have my instance locked into an unprivileged lxc whitelist only on syscalls which took a while to figure out the minimum needed for function but I got there. The host System is using the hardened kernel from Upstream and a series of sysctl lockdowns for example P Trace is not allowed even if you are the root user.

    So I do indeed just nginx reverse proxy my instant because the worst case scenario even if they got complete shell access to the system they would be locked into an unprivileged container that had no access to any files other than my media files but the fact that I have to go to this level is already ridiculous

  • I mean some may be offering that but it means you can just rent a cheap. VPS and host your own

  • You won't have to. Bitwarden is FOSS. The server is able to be self hosted so "migration" will just be you moving their account to the self hosted one if things go south

  • Bitwarden is completely FOSS, both client and server

  • I feel like you missed the part where I said that I'm showering daily, I have a dishwasher, do laundry with a standard front load washing machine i may not be connected to a city water but I have everything plumbed in i have all the usual stuff in a household. The only thing that was relevant about being off grid is that I have an exact understanding of how much water I go through at any given moment

  • That definitely feels high, mine is a household of two but I know exactly how much water I use because I'm off grid and I have to go haul it myself from the city my tank on my trailer holds 275 gallons and that's generally enough to last me anywhere between a week to two weeks depending on how much laundry I need to do.

    I shower daily, do dishes all the usual stuff so what the fuck is the average family doing with all that water that they are using more in a day than I do in a week

  • Honestly I feel like it's too little. At the very least the first wave of Hardware should be something crazy like the account has to be at least 10 years old have at least 30 purchases total and have an average of 8 hours a week play time.

    Sure there will be some legitimate people that get filtered by that but it will pretty much guarantee scalpers can't get anything in any serious volume

  • Ask Lemmy @lemmy.world

    What do you think about post longevity on lemmy

  • 3DPrinting @lemmy.world

    Help interpreting benchmark results

  • Selfhosted @lemmy.world

    Good Self hosted MDM?

  • Lemmy Shitpost @lemmy.world

    Average Amazon user intelligence

  • Sync for Lemmy @lemmy.world

    Where is the login