• 0 Posts
  • 57 Comments
Joined 2 years ago
Cake day: June 16th, 2023


  • I am very interested in this as well.

    I wonder if creating some kind of shared NixOS setup might work? (I know very little about NixOS but it seems like it should be good for this sort of thing?)

    If you start down this road and set up a git repo or something, I would be interested in contributing/testing.

    I also kinda like the idea of being able to slap other things into usb ports - dashcams, a usb stick with a good road trip mix, etc.




  • Citation needed.

    The most compelling feature I always get asked if Jellyfin has ala Plex is the discovery/NAT punch for linking people up.

    That does not strike me as something that necessarily breaks backwards compatibility. It would require some centralized discovery, and I think that is probably where we run into an issue because if I were the Jellyfin devs, I wouldn’t want to have to support that, either.


  • You sound like me. I hope you can find a way to flip your focus: your time outside work should be way more about you than it sounds like your work life is letting it be.

    Maybe you are one of the very few with a meaningful job. If not, consider trying to treat your job like the bullshit it is and use your best cycles outside work on stuff that will really make you happy.








  • so uh … I’ve been sorta contemplating preinastalled hardware. Think a mini pc you plug into your router. Or even a minipc that replaces your router and has a clean UI for picking a handful of curated self-hosted stuff you want.

    You could buy the hardware as a simple jumping off point to learn more or (and here is where I am not sure if there’s a market) you could pay me (or other sysadmins like me) to support it.

    What if self-hosted stuff worked a bit like your HVAC,. electrical or plumbing?





  • Mprotect stops any read and write and execute access to memory in both user and kernel lands (only rx or wx). Stuff like web browsers won’t work unless you have a program to mark it in elf to not use pax. However, this kills a lot of exploits with that turned on by itself (though there are probably work arounds if you are developing exploits which the other features would hopefully catch). That’s why people installed 3rd party unmainlined security patches, but that’s just me maybe idk.

    I am having a hard time following what this does or why this is desirable. You’re saying there’s a patch this thing provides that … disables memory access … unless a flag is set in an executable … which will then bypass the security?