7·
2 days agoNice ( ͡° ͜ʖ ͡°)
Captain Janeway
- 0 Posts
- 33 Comments
Joined 2 years ago
Cake day: June 12th, 2023
You are not logged in. If you use a Fediverse account that is able to follow users, you can follow this user.
16·4 days agoHoly shit the article is far less tame than the title. They provided several ways to run commands as root and they can be generated as an over-the-air HTTP call. As per the article, if you buy the Jooki domain, it’s very likely you can control every single Jooki on the market. You can make the speaker do whatever you’d like. Pretty scary stuff. One has to wonder what nerds can do with that kind of tech: turn speakers into a low quality mic? Use them as bots for a DDoS attack? Just start blasting heavy metal music? Or just brick every device?
It’s pretty wild what the devs have done here. I can excuse executing commands as root from a file on the SD card. It’s not exactly safe or smart but it’s also not the most dangerous thing to assume only people with access to the device would do that. Hardly a worry for most parents as long as you’re not especially reckless. But to allow OTA root level commands to be run? That’s a horrible design. At least setup a user that can only execute a few pre-designed scripts. Don’t just give them carte blanch to run havoc on your hardware.
Just another reminder that every wifi enabled device is likely a ticking timebomb. Especially low quality devices meant for kids. Baby monitors, speakers, etc. have a history of being built cheaply and poorly. That’s why I bought non-wifi baby monitors for my family.
As someone who has been watching her Tiktoks for many years, it makes me happy.
1·13 days agodeleted by creator
deleted by creator
22·13 days agoI paid for the lifetime membership ~6 years ago so I’m going to stick with it. Plus I just use it for my own home. It’s not like I’m serving a bunch of other clients. But I’ll switch to Jellyfin if the lifetime membership ever gets taken away.
I don’t speak a lick of Japanese but I found this online:
です is used to mark words as polite if they cannot conjugate to show politeness themselves… です is one of the most fundamental words in the Japanese language. It’s super useful — it can be attached to just one other word to form some basic sentences. It’s also quite safe to use since it’s part of the polite form, so you’re unlikely to offend someone with this word… です can be tacked onto the end of a noun, な-adjective, or い-adjective to form a polite, positive, present tense sentence (say that ten times fast 😉). In other words, it allows us to talk about something that is true, and relevant to the present moment and/or the future—all in a polite way of course.
In a nutshell, if your app isn’t able to make a direct connection to your Plex Media Server when you’re away from home, we can act as sort of a middle man and “relay” the stream from your server to your app. To accomplish this, your Plex Media Server establishes a secure connection to one of our Relay servers. Your app then also connects securely to the same Relay server and accesses the stream from your Plex Media Server. (In technical terms, the content is tunneled through.)
So, your Plex Media Server basically “relays” the media stream through our server so that your app can access it since the app can’t connect with your server directly.
Source: https://support.plex.tv/articles/216766168-accessing-a-server-through-relay/
It’s not a requirement to stream and it’s sort of dumb they are lumping this relay service as a part of the remote streaming. Remote streaming should be allowed for free - if you are not a subscriber. The relay should just be a paid service, which makes sense. But if it’s a direct connection to my server, it should be free.
That being said, I understand how Plex may have built some technical debt into this relay system. It might be hard for them to decouple the relay from the remote streaming. What they should have done is:
We are removing the relay service as a free service, but you can still do remote streaming with a direct connection.
And they should have built their architecture in a way that’s easy to decouple the two services.
I hate how much effort is put into property damage but when my house was broken into or when my friends truck was stolen, the police did nothing.
It’s also disturbing how hard it is to be anonymous. Crime or not, it gives me the creeps that anyone could probably track me down if they wanted.
That’s true for PC gaming but might not be true for these NUCs. I’m not an expert but I wouldn’t be surprised if they shaved costs with bulk purchases of RAM and SSDs for these devices. Regardless, I was just addressing a point you made about being forced to buy the components yourself which isn’t the case. Pricing is probably going to vary wildly depending on what you pick and you might be able to save money if you’re ok with less RAM or less storage.
You shouldn’t have to pick it all separately. Some Nucs are “barebones” and others come with RAM, CPU, Storage, etc. This Amazon link purportedly claims to have RAM, SSD, etc. pre-built into the ASUS NUC.
That being said, any NUC’s integrated GPU is likely going to be far superior to the RPi5’s CPU encoding (which I assume was your previous setup).
If you want to spend ~$1000, you might be better off with just going straight for the dedicated NAS.
The app isn’t available on as many platforms. The original comment claimed the TV their MIL uses doesn’t have a Jellyfin app and would require side loading. I would argue that’s a pretty big barrier for most people.
That might be illegal if it’s not zoned for residential. That’s how it works in the USA.
TBF if you want, you can have a bastion server which is solely whitelisted by IP to stream your content from your local server. It’s obviously a pivot point for hackers, but it’s the level of effort that 99% of hackers would ignore unless they really wanted to target you. And if you’re that high value of a target, you probably shouldn’t be opening any ports on your network, which brings us back to your original solution.
I, too, don’t expose things to the public because I cannot afford the more safe/obfuscated solutions. But I do think there are reasonable measures that can be taken to expose your content to a wider audience if you wanted.