• 0 Posts
  • 187 Comments
Joined 2 years ago
cake
Cake day: August 6th, 2023

help-circle
  • I recall a number of prominent users on lemmy proclaiming that this would not, could not happen within the past few years. And yet here we are, the acceptance stage from the financial elites. No grand resistance, no big push by retailers or wall street to crush Trump into obedience. Not even attempts at doom-saying that this will entirely destroy the economy just kind of passive acceptance and a shrug that it’ll hurt but oh well. I guess we’ll have cold war 2.0 after all with separate blocs and more horrible proxy wars instigated by the west.

    It may seem petty of me but I’m just a working person and I don’t look forward to price increases I can’t afford of 250% on random things I need. I buy so many things that are made in China from kitchen tools to electronics to parts to repair appliances because it’s cheaper than throwing away or a repair-person (not anymore I guess). This is going to hurt me and other people badly. I also worry what it means for the ability of the US to launch a war on China.


  • This is pointless burdening of small actors by big actors. On top of lets encrypt losing funding from the US government, it could easily collapse from strain like this. And then where are we? Back to the bad old days of very expensive certificates which will be even more-so with such a short validity period.

    Big tech doesn’t care, they never cared about your small site being encrypted against NSA spying or MITM by bad actors, they want everyone in their walled gardens and for people to spend as little time as possible outside of places like Facebook. Google will de-rank sites don’t implement encryption and if the costs for that go from free to quite expensive that pushes the free parts of the web like small forums, blogs, fediverse etc even further to the margins.

    Self-hosters who do things like hosting their own Jellyfin instance who require their own certs now have more renewals, more chances something breaks and if things like this push Let’s Encrypt under then that $5 porkbun domain you have for yourself and family is going to be $69 next year if you want to encrypt the traffic of all your linux isos being streamed.

    Better revocation processes and standards for browsers and apps to fetch and download revocation lists in a timely manner are needed, not this.

    This kind of frequency creates an incentive to set and forget automated processes and pay less attention to everything happening so when things break or security fails it’s catastrophic and not noticed.


  • Yes, absolutely. And they can drag Canonical into it as well if they wish though it’s harder. Being UK based doesn’t protect them from the long arm of US law including arresting any US personnel, freezing and seizing their funds, putting out arrest warrants for and harassing those in the UK with the fear of arrest and rendition to the US if they go to a third country (for a conference, vacation, etc, most would buckle rather than live under that). Additionally the US could sanction them for non-cooperation by making it illegal for US companies to sell them products and services, for US citizens to work for or aid them, etc.

    They can go after community led projects too, just send the feds over to the houses of some senior US developers and threaten and intimidate them, intimate their imminent arrest and prison sentence unless they stop contact and work with parties from whatever countries the US wishes to choose to name. Raid their houses, seize their electronics, detain them for hours in poor conditions. Lots of ways to apply pressure that doesn’t even have to stand up to extensive legal scrutiny (they can keep devices and things and the people would have to sue to get them back).

    The code itself is likely to exist in multiple places so if someone wanted to fork from say next week’s builds for an EU build they could and there would be little the US could do to stop that but they could stop cooperation and force these developers to apply technical measures to attempt to prevent downloads from IP addresses known to belong to sanctioned countries of their choosing.

    It’s not like the US can slam the door and take its Linux home and China and the EU and Russia are left with nothing, they’d still have old builds and code and could develop off of those though with broken international cooperation it would be a fragmented process prone to various teething issues.




  • If you’re just backing up and not serving this data just get 2-3 4TB drives (new, recertified, or used) and an external dock and test the drive then back it up then test again and check SMART both times. Place one drive with a relative or trusted friend. Connect and power up each of the drives at least once annually, refresh the data with anything new at that time and check the smart stats, consider running at least a quick SMART test to ensure none are mechanically failing then back to being unplugged. Really every 3-6 months would be ideal to power on and check SMART but I wouldn’t pester a relative that often for the external one, 1-2 times a year should be fine for that.

    This strategy protects you from cryptolocker malware by not leaving any of them live and accessible.

    • What’s the cheapest and most flexible NAS I can make from eBay or local? What kind of processors and what motherboard features?

    Cheapest or most flexible, choose one. If you want absolute cheapest but not that flexible you can buy a used office PC, a Thinkcenter or Dell optiplex are the most reliable ones though depending on the model they may accommodate anywhere from 1 to if you’re lucky 4 (though commonly only 2) drives via that many SATA ports (often half the SATA ports are 1.0/2.0 for DVD drives so you may not get full speed). Finding space inside them for more than 1 drive could also be a problem depending on form factor but mid-tower models often have room for 2 with space for a third lying on the case itself if you really want to push it.

    Most flexible I suppose someone else’s old NAS build, a used case with room for at least 4 3.5" drives gives you a little room to expand.

    • What separate guides should I follow to source the drives? What RAID?

    You don’t need RAID, it’s not a back-up solution, RAID is for high data availability and integrity. If you really want to you can set-up a RAID 1 I suppose though know this means you’d require at minimum 4 disks for your data and one copy and 6 disks for two copies.

    As to sourcing the drives, there are various companies, server parts deals is one that’s well known and decent though their presently available sizes may be larger than what you’re after. No matter whether the drive is brand new, recertified or bought used on ebay the recommendation is test, test, test. Even new drives can be bad. Run a full SMART test at least once, check the SMART data and make sure there are no failure indicators. If you want to be really thorough I’d suggest checking the SMART data when you get it, noting anything concerning, running an extended/full SMART test then after that finishes formatting the drive but unchecking quick format and doing a slower format option that writes zeros across the drive, then filling with your data, then doing another full/extended SMART test and again checking the SMART values before putting it away. Re-test and check SMART at least annually if you’re keeping the drives cold.

    • What backup style should I follow? How many cold copies? How do I even handle the event of a fire?

    At least two copies, ideally three, at least one copy off-site for things such as fire. If you don’t have a relative, friend, or workplace where you can stash an off-site copy your option would be basically cloud storage back-up which for 4TB wouldn’t be too costly (backblaze personal would allow this much IF you keep one copy connected to a computer that has their app and is turned on at least monthly and they’re $100 a year though note they will delete your data if you go more than 30 rolling days without syncing so if there is a disaster you have a limited time to either get another drive and download it again or contact them and pay to have a copy shipped to you before it’s deleted).

    You could also I suppose invest in a fireproof safe though that doesn’t protect against burglary where they steal your safe thinking it has valuables in it. You really need a copy off-site. Other options would be a bank safe deposit box though probably more costly.

    One way to get friends to help is to buy more storage space than you need, say two 8TB drives and you offer to back-up a copy of their stuff at your house so you have a copy of their stuff+yours at your house and they have the same copy at theirs. Though you could also use separate drives.

    Most are redundant video files that are in old encodings or not encoded at all

    All re-encoding unless it’s from lossless to lossless induces degradation. For archival purposes I’d suggest against re-encoding unless it’s to another lossless format or unless they’re in a lossless format or very high bitrate (>20MBps video for SD or 1080p HD) and you’re keeping a high bitrate in the new encoding. Also avoid hardware encoding, it’s faster but introduces more degradation and is less precise than software encoding. Removing duplicates is another matter.



  • Sure you can probably get a good value on a bluray player because people are getting rid of them still to go all streaming. But can you get a good price on a used working order 4K TV? Probably not. The prices of even used 2 generation old goods are going to be as high as they were when new before tariffs hit.

    Used is not going to be cheaper in a week or a month or 3 months of tariffs, it’s going to be the same amount as new right now or possibly more.

    These days there are sooo many resellers, flippers, scalpers. People who think it’s a side hustle to go around buying up cheap used stuff and selling it for just below the price of new stuff and pocketing the difference. It’s become so hard. Late capitalism ruins even good deeds.


  • MakeMKV can rip the DVDs without touching the contents. I’d suggest either an ISO or more helpfully the contents in folder layout which should be preserved under a top level folder with the name of the disc and at the bottom level .vob files.

    You certainly can use Handbrake but it is re-encoding and if you have no experience it’s easy to mess up (among other things de-interlacing doesn’t always work right without tweaking so it’s typically best for archiving to not re-encode DVDs before sharing).

    -If- you do chose to use Handbrake (again I wouldn’t recommend it if archiving, it takes skill and there’s a reason why to this day full DVD rips are useful to people who want a copy while someone’s best attempt at an AVI file made 15 years ago looks awful and is considered useless given the low bitrates and old codecs) I’d plead you use software not hardware encoding, choose x264 or x265 (10bit for x265) and use the slow preset at CRF, constant quality 16 and make sure de-interlacing is set right on auto, also pass through the audio in original dolby digital as well as vobsub subtitles. But it really is best to not encode and just copy.

    You can share directly to the DHT swarms by just creating your own torrent and eventually people will find it assuming it’s named correctly in the format of <movie name (year)>.

    Don’t duplicate other people’s work if you can help it. There are various sites for sharing this type of stuff, I don’t want to get in trouble so won’t name the one but there is one listed in the piracy community megathread, a Russian one, semi-private. I would search disc titles first to make sure what you’re doing doesn’t already exist and focus on archiving and sharing original non-re-encoded copies of those which don’t presently exist elsewhere.





  • First we are going to buy something. Mullvad VPN. Its the only VPN id recommend getting. It is 5.50$ or so a month, and if you cancel your streaming accounts it’ll pay for itself now that you’ll be pirating stuff with it.

    Why that provider? Mullvad removed port forwarding. Why not recommend a VPN better suited for torrenting that has port forwarding which can massively help in getting better speeds and getting connections at all on all but the most popular torrents? Yeah sure if you’re only downloading the latest TV episode release you’re fine but if you’re interested in something obscure (as Marxists are often wont to be) it becomes a real problem.

    AirVPN for example still supports port forwarding and is a bit cheaper than Mullvad per month. They also have sales several times a year where it gets even cheaper.

    Would I trust them politically? I don’t trust any VPN company that way. I don’t trust any of them to not be deep cover CIA/five-eyes/zionist intelligence cut-outs or paid off to provide that data to the aforementioned and neither should you.

    There are a couple other options with port forwarding but PIA was bought out by an ad-tech company which makes them a little extra sketchy though still fine if you just use for torrenting. Proton also offers port forwarding for p2p specifically but many think they look extra like CIA and want to avoid them, their prices also aren’t quite as good.


    I’ll also mention qBittorrent has a search interface right inside it, view: search engine and then click the bottom for search plugins, update all and you can start searching most of the more popular public indexers without having to visit their ad infested sites and wait for page loads. You can add in Jackett as a plugin (configuration details on its github) after installing it and add even more site including private and semi-private open signup like rutracker after creating an account and putting the details in Jackett.

    One important thing: NEVER use software or executables you find via these searchers, they include DHT scrapers that scrape for any and all things out there in the swarms and it’s a great way to get malware. You can search for your favorite repack but make sure it’s on a site you know is trustworthy from an account you know is good, you can right click the results and click to copy the url to paste into your browser to check before downloading that it’s a good source. Don’t ever run software where the source you’ve chosen is solidtorrents and I’d recommend against it if the source is the pirate bay as well as they have a lot of malware there too.


  • It’s as commonly abused as it is “reclaimed”, in a male-dominated space like this it’s more abused than reclaimed. One could make the same arguments for the n-word and black people reclaiming it, thing is online there’s no way to know who is black, who is a woman, and who is a white man who claims to be a black woman online so he can use words like that and get away with it.

    Online moderators are not suited to identifying and organizing a system of n-word and b-word passes to people through verification so we have to assume many, many uses would be in bad faith by people not part of those groups in a potentially hurtful or offensive way.

    I want to note I didn’t implement this and have no power over it but I do find it kind of shocking since opening an account here how often people use the b-word online casually and I do not think most of them are women.

    Queer and gay I’d say have been completely reclaimed. The last time you saw “gaaay” as an insult in popular culture was probably the 2000s decade in young adult media. Whereas to this year you see new media of some angry man screaming “you b-word” hatefully at a woman being made all the time. Men just know it’s something you call a woman or girl when you’re angry at her, men just know it’s a sexist slur, a softer one that the w-word for promiscuous but one just the same used in anger to attack women. When that stops happening, when it’s not in media when a generation of young men think it’s no longer acceptable even in anger to do that perhaps there might be a point to what you say.

    I admit it can make following things confusing at times. I kind of wish it censored it in the form of B<removed> or something to indicate which one it was.

    I also agree regexes are not nuanced, I’ve seen false positives based on some pretty obscure ones. But it’s policy set by the admins of this instance so the choice is basically accept it or move to another instance like lemm.ee.


  • It’s server-side. The b-word (sexist slur against women), r-word (intellectual disability) tend to be the most common caught ones (I’d say 95%) though the f-word against queer people and other more and less obvious racial ones are included as well.

    It doesn’t impact swears that aren’t denigrating such as fuck, shit, ass, damn, etc.

    If it’s essential you see those words you’d need to create a new account on another instance like lemm.ee or something.



  • Neither of which they’re going to do or address.

    This is Lucy with the football and Dem voters are Charlie Brown sure this time she won’t pull it away. Well she will. And if she doesn’t they have the Republicans who magically have the power to break laws, rules, ignore the parliamentarian and Senate decorum and so on and do whatever they need to put a stop to this to which Dems put up feeble resistance then shrug and say they tried but oh well. They didn’t really try. They never will. And they’ll never break rules, never stack the supreme court, never play ball.

    They will let their most rightward members split to sabotage a vote, they won’t try party discipline, they won’t whip members, they won’t threaten, they won’t do old politics stuff of if you fuck with the party on major things you get shut out of everything, your district doesn’t even get $5000 for a new sign for its park because you get nothing, not assignments, no allowing your bills, no riders, nothing. Play ball or get shut down. Play ball or the party supports a primary challenger on top of those things and does everything it can to push you out. But they won’t do that because they don’t want any of this and are happy to have spoilers derail it so they can pretend they wanted it and pretend they listened to their base and pretend they tried.


  • Interesting project. Thanks for the link and I do appreciate it and could see some very good uses for that but it’s not quite what I meant.

    Unfortunately as it notes it works as a companion for reverse proxies so it doesn’t solve the big hurdle there which is handling secure and working flow (specifically ingress) of Jellyfin traffic into a network as a turn-key solution. All this does is change the authorization mechanism but my users don’t have an issue with writing down passwords and emails. Still leaves the burden of:

    • choosing and setting up the reverse proxy,
    • certificates for that,
    • paying for a domain so I can properly use certificates for encryption,
    • making sure that works,
    • chore of updating the reverse proxy, refreshing certs (and it breaking if we forget or the process fails), etc

    Which is a hassle and a half for technically proficient users and the point that most other people would give up.

    By contrast with Plex how many steps are there?

    1. Install (going to skip media library setup as Jellyfin requires that too so it’s assumed)
    2. Set up any port settings, open any relevant ports on firewall, enable remote access in setting with a tickbox
    3. Set up users
    4. Done, it now works and doesn’t need to be touched. It will handle connecting clients directly to the server. Users just need to install Plex client, login to their account and they have access.

    By contrast this still requires the hoster set up a reverse proxy (major hassle if done securely with certificates as well as an expense for a domain which works out to probably $5 a year), to then have their users point their jellyfin at a domain-name (possibly a hard to remember one as majesticstuffbox[.]xyz is a lot cheaper than the dot com/org/net equivalents or a shorter domain that’s more to the point), auth and so on. It’s many, many, many more steps and software and configurations and chances for the hosting party to mess something up.

    My point was I and many others would rather take the $5 we’d spend a year on a domain name and pay it for this kind of turn-key solution for ourselves and our users even if provided by a third party but that were Jellyfin to integrate this as an option it could provide some revenue for them and get the kinds of people who don’t want to mess with reverse proxies and certificates into their ecosystem and off Plex.



  • Bullshit. The begging, pleading lies of those caught in the act and facing down a 20 year sentence, promising now that things have come to a head they’ll change the way they’ve been all their life if just once more they’re let off the hook for their actions.

    It reminds me so much of the Saddam bit from the South Park movie where Saddam is in an abusive relationship with Satan and keeps winning him back by promising to change and then doing something performative before going back to his old ways. “I can change, I can change!” he sings and it’s the same tune these Democrats are singing. They’ve been singing it off and on for decades every time they lose the base too much then immediately putting away that number as soon as they get the base back and berating them for demanding better, for ‘purity testing’ and so on and brow-beat with accusations that demands for change help Republicans win.

    So excuse us if we’re a little skeptical because this song and dance is very worn.

    How about actually defending trans people and trans rights instead of getting mealy-mouthed? How about making impassioned speeches in defense of trans kids right to affirming care and transitioning? No they won’t do that.

    Or condemning the genocide in Palestine and calling out the elements in their own party supporting it? No they won’t do that either.