• 0 Posts
  • 46 Comments
Joined 2 years ago
cake
Cake day: August 9th, 2023

help-circle
  • After getting a NAS to replace my raspberry pi 4 as a home server, I literally just SCPd the bind mounts and docker compose folder, adjusted a few env variables (and found out of a few I needed to add for things like the uid/guid the NAS used as default for the media user I created) and it took maybe 30 minutes total to be back and running. Highly agree with you from experience.


  • ChapulinColorado@lemmy.worldtoSelfhosted@lemmy.worldPewDiePie: I'm DONE with Google
    link
    fedilink
    English
    arrow-up
    4
    arrow-down
    1
    ·
    edit-2
    8 days ago

    They are also way too small in terms of storage given that they don’t support external cards (Apple is similar). Google/Apple definitely want buyers to also buy their subscription storage services or pay the high premium for the next storage level.

    I’m on an XR right now and it feels older, but still very much usable. I wish companies offered options to only get security patches instead of having to buy new phones every few years, that’s the 1 thing I hope Google keeps around and doesn’t walk back in the future.




  • Out of curiosity as an owner of a QNAP NAS, how did it go out? Any signs it was in its last legs? Now that I’ve used one, the form factor is the only thing better than most options out there when I got it.

    Nowadays all QNAP, Sinology and other NAS vendors supposedly offer a lot of extra value with their cloud options, but I find them a sure way to get hacked based on the average company’s investment in security (I work in IT, it is a sad affair sometimes) combined with all the ransomware specifically targeting them due to old packages they rely on = I’ll build my next system from the ground up, even if the initial cost is higher and the result is uglier.





  • You don’t have to take my word on this, but when you have so many vulnerabilities, the foundation and knowledge about security practices by the developers is missing some key ingredients.

    I use Jellyfin. I like jellyfin. I would like people to use jellyfin, but do it responsibly.

    Citing backwards compatibility is not an acceptable answer either. If individual endpoints and/or protocols (web sockets) are being addressed as separate issues, then there is no overall filter for the most basic thing as checking if the user is authenticated, you know a potential attacker will look for more.

    Will they target jellyfin instead of your average government website with a low budget and similar issues? Unlikely, but possible if the level of effort is low and can potentially create a large botnet, maybe?

    You handle these with overall filters (or whatever they are called on c#) and white lists if something truly needs not to have it instead of reacting when someone reports it.

    The simple fact that some of the code was sending api keys as GET parameters (which get logged cross every access log in the middleware on its way to the target server) and it didn’t raise any flags seems sufficient enough to suggest DO NOT expose jellyfin directly to the internet.







  • Same here. I’m using the Nortek z-wave and sigbee usb adapter with zigbee2mqtt + home assistant (both on docker). They are sometimes annoying to pair, but never had one drop for anything other than low battery (original battery sometimes craps out after a few months, but replacements go for 1+ year). I did hear their second gen motion sensor was kind of a miss when compared to the original one, so I stuck to the v1s. Not sure if they’ve addressed the reported issues. People also say that they don’t follow the protocol to the letter, so it seems possible that depending on the hub, they might not work as expected.

    We also have some third reality smart switches that turn a switch “smart” with a physical mechanism on the outside, while not as good looking, they are awesome for renters when you want yo automate things like kitchen lights without having to replace anything on the circuit itself. The batteries last forever (aaa). I found that adding some vinyl matching the color of your outlets makes them more stealth if you also don’t have white outlets.

    Edit: one of our third reality switches was placed on the porch light, which we wired the Christmas lights to this year using one of those $1.50 light socket to socket adapters (LED Christmas lights use very little energy - should be ok to power with a light socket which can do 100w for porch lights just keep it below 60w if unsure). It made automating them on when the sun set and off after midnight or so a breeze.






  • Not sure if the UK is similar to where I lived, but they were the worst “cloud” provider I’ve ever used. Want to shut down the instance you had to recreate it with a different OS? Good luck getting it back online as they are out of capacity. Also, if you accidentally deleted one of the default network components it was impossible to recreate it without incurring a cost kind of going against anything you learned about cloud computing and “infrastructure as code”. It was a glorified GUI.

    Edit: I’m just glad my current employer does not use anything oracle as their support is also famously bad.