• 4 Posts
  • 488 Comments
Joined 3 years ago
cake
Cake day: June 22nd, 2023

help-circle



  • Sure but that’s a valid trade. Same with their rotisserie chicken it’s a genuinely good deal. It’s there to make sure you have a membership, and they put it in the back of the store because you will inevitably Buy other things you see on the way there.

    But as long as you are able to have a little bit of self-control and purchase things that you will actually use you can genuinely Save A Lot in bulk at Costco compared to other places. They make money because you shop mostly with them you save some money over constantly buying individual things that you use all the time.

    Even if you didn’t save money it’s still more convenient to only need to go shopping like once every 3 weeks for bulk items once at Costco. So there’s some time savings to be had which God damn do you need as much of that as possible these days






  • I hear this a lot but I’ve never been able to get concrete examples. I don’t notice any inconsistency with my system or any of its applications, I don’t have issues with misaligned icons although I’m not sure where we are even talking about there’s a lot of places that icons exist. But on the task bar notification tray and within the file browser I don’t notice any misaligned icons anywhere.

    I suppose I can’t speak for the entire fleet of KDE software as to be perfectly honest I don’t use much of it, that’s kind of the joy of linux is you aren’t locked into a particular ecosystem and I have found that the only KDE applications I really make use of is dolphin, Kate, Krita, and kcalc. Outside of that i have things like mpv for video, clementine for music, etc. Hell i use gnome disks for making bootable flashdrives i really like it easy just apply an image click go sure I could do it with DD in the terminal and sometimes I do but it’s nice to be able to just right click context menu an ISO and write it to the flash drive.

    I don’t really see the need for all my applications to be unified under a very specific theme or design philosophy in fact I generally prefer that they don’t. It often creates applications that have limitations or other problems for the sake of maintaining the design philosophy. I want a program that does a thing and does it very well regardless of how it may lay that out. but I suppose for some people a cohesion between different tasks is important and thats fine too, i just don’t really understand it for myself


  • I’ve had in depth conversations with people on both sides of the fence and really dug down and made them explore and explain the why for either side.

    What I found is that it boils down to whether or not you are fine with doing some initial setup. People who love KDE almost never use the OOTB configuration it is pretty much guaranteed that they have every intention of customizing the interface whether that’s through themes changes in layout or add-ons that bring entirely different workflows. Almost every instance of a KDE desktop is unique when you dig into it.

    People who love gnome do not want to configure anything ever, they are happy with the workflow as it is out of the box and thus happy with the environment. At the end of the day you can make KDE look and behave almost exactly like gnome, but if gnome already fits your desired work flow why bother? When you get the people that use gnome but do have complaints it’s usually that there’s only like one or two things they wish they could change slightly so it’s not worth going to KDE and configuring everything to be how they want.

    I fit into the first camp, i love KDE specifically because I can change virtually any piece of it to be exactly how I want. I do not use the out of the box configuration, I make a number of changes they are not major ones I get rid of the floating taskbar because I think it looks stupid like my graphics driver is broken or something, i make changes to the layout of the file explorer I make some context menu changes here and there change the theme change some things about how the windows behave. overall i don’t think you would immediately notice sitting down at my computer if you were used to kde you would just discover things that broke your muscle memory as you went.



  • The nginx rce relied an a series of requirements that affect almost nobody. You had to be using a very specific module and processing a specific type of data reverse proxy was not affected.

    But regardless I get your point that anything can have an RCE. However as you say at the end in principle that does not mean you should just give up and expect external projects to handle your security. VPN is a great way to access your services and it is good defense and depth, but for the sake of being a successful project to the masses? It’s basically a dead end Road


  • Actually, i mentioned the memory leaks as it’s been a consistent issue for years now. Again normal people cant and won’t setup special containers with memory limits as a crappy work around.

    You may not like that i don’t blindly glaze jellyfin because it’s open source. However I’m just being realistic about what it needs to actually be a viable replacement for plex for the masses.

    It needs to be able to match media properly, it still struggles with this even when you go out of your way to make sure the media is named in the exact manner the documentation dictates. It needs to be able to be used remotely simply through the web, having to set up a VPN is not a viable approach, it needs to be able to function long-term without eating up all the system’s memory and requiring regular restarts to prevent it from going out of control. Subtitles need to work on all clients, as it stands right now Roku subtitles are non-functional like 80% of the time no matter what you do, some TV browsers struggle with it as well.

    I am sorry that that upsets you, but it is the reality and it is the reason the projects like these tend to mostly be used by the technically inclined. Including myself, I was able to put it in an unprivileged secured lxc container, so that I could use it through the web and set memory limits, but most people cannot and will not do that. I would prefer to see it be successful and be able to tell everyone never touch Plex again, but I know that telling people it’s ready to go while it has a myriad of basic issues is not helpful.




  • Once? No jellyfin has had about 4 major RCE issues since the fork. At least 4 that I’m aware of. Blaming it on the previous code only makes sense if the split is recent. They have had time to completely rewrite if they really want.

    I’d like to see plex die entirely, but I know too many less technical people that use it . They are not going to set up a VPN , end of story end of discussion. And I’m not going to tell them to use jellyfin when it will likely continue to have major security issues and could compromise their systems. I have no doubt that Plex leadership is fully aware of this, they know that even with them pushing more subscriptions and higher costs they are going to continue to have users because the alternatives are just not able to keep up and are not viable for the average person just the technical users which they would have lost to alternatives regardless



  • It has had a pretty high number of RCE exploits including one recently the architecture of the web service is just very poor and leads to a lot of basic problems.

    Personally I am not a fan of the language they chose, and I think it directly leads to a lot of these problems but that’s just like my opinion man.

    The server itself also has tons of issues like the constant memory leaks that cause it to eat up endless amounts of memory that they don’t seem interested in fixing and basically once again push it to the users to deal with and a bunch of the boot lickers are like yeah you just need to put it in a Docker and limit its maximum memory as if that’s just normal and expected to need to do


  • I am aware that an rce is the worst possibility I’m saying it shouldn’t be. The web portion is already its own isolated binary that you have to install but it’s designed with seemingly very little attention to security.

    To the point that jellyfin has already had several major RCE and despite having full support for running over the web with http developers are basically just like you should not be using this without a VPN which is overall a pretty pathetic stance for a media server


  • This is the most hilarious lie I think I’ve seen in a while from open source on here. To be clear I use it as my daily driver, I switched off Plex a long time ago when I saw the writing on the wall.

    But I still have issues with media matching to this day, issues where subtitles on certain devices just refuse to display no matter what you do. And the server still loves to randomly take up absolutely massive amounts of memory for seemingly no reason whatsoever I ended up making a strip to just forcibly kill it and restart it every 12 hours to prevent it from eating the entire system’s memory.

    And no my file naming is not the media issue everything I do is properly named exactly as jelly fin documentation says it wants by sonarr. Not to mention you are expected to maintain a VPN system just for accessing your media away from home as the web interface is so hilariously unsecured as to be a constant source of major system vulnerability.

    It’s usable, but it’s not as just works as Plex I have thousands of TV shows, anime, and movies as in thousands of each of those categories and Plex never once failed to match to the correct media, never had a problem just playing subtitles on any client, and I think only ever had one major issue with the web interface in terms of security? There’s been lots of minor ones that would give people essentially just access to Plex but not the underlying system