I use a domain, but for homelab I eventually switched to my own internal CA.

Instead of having to do service.domain.tld it’s nice to do service.lan.

Yea no clue what this is. No context, can’t reqd what was attached because it’s an image. Waste of a post.

Agreed, and unfortunately articles like this are food for CEOs to do more under the guise of AI. “See, it works!”

Wouldn’t it be more efficient to put this on Codeberg and accept PRs?

I’m still running Qwen32b-coder on a Mac mini. Works great, a little slow, but fine.

Yea I just hit 2k hours. I don’t play a ton but have been playing forever and am now hearing Rematch may be a good secondary.

Were you a Rocket League player by chance?

I just validated that the latest version of the LDAP privilege escalation issue is not an issue anymore. The curl script is in the ticket.

This was the one where a standard user could get plugin credentials, such as the LDAP bind user, and change the LDAP endpoint. I.E., bad.

I chose this one because after going through all of them, it was the only one that allowed access to something that wasn’t just data in Jellyfin.

So for me, security is less of an issue knowing that, as only family use the service, and the remaining issues all require a logged in user (hit admin endpoint with user token).

Plus, I tried a few of those and they were also fixed, just not documented yet. I didn’t add to those tickets because I was not as formal with my testing.

@[email protected]

Use an LDAP to OIDC bridge?

Searching for Garmin Tempe ANT+ changes since it was deprecated. Two people were debating how they measure temperature during their rides. Another commenter said if they weren’t careful, they’d start a thread like… link.

So yes, unrelated, found, never seen before, thus the XKCD.

Doubt all you want. https://xkcd.com/1053/

It will have had to. Many of the most common from pre 2012 are not allowed at banks. And no 4 consecutive digits are.

Makes sense. Still annoying 😆

Thanks! I may investigate some, too, we shall see.

Except no dates. This chart is soooooo old.

Using the same digit 4 times is no longer allowed most places, but this chart shows them being pretty popular.

This chart has no sourcing or date associated. Is it old?

Edit: Yes, it is. Here is the excellent source article: http://www.datagenetics.com/blog/september32012/

So it’s from 2012, and used historic breach data from years before then.

In other words, this chart is wholly inacurate now.

Tagging those discussing similar: @[email protected] @[email protected]

Make a dummy Google Account, and log into it when on the VPN. Having an ad history avoids the blocks usually. (Note: only do this if your browsing is not activist related/etc)

Also, if it’s image captchas that never end, switch to the accessibility option for the captcha.

This 100% needs to be reported. First to KIA, then to the media after whatever time is required to pass for responsible disclosure in your country/region.

Coming across this now, did you ever explore options?

Yea that’s my biggest worry. I’m wondering if a mat over sheet would be too much since the sheet can only have so much density.