• 2 Posts
  • 316 Comments
Joined 2 years ago
cake
Cake day: June 4th, 2023

help-circle

  • Domi@lemmy.secnd.metoLinux@lemmy.mlThank you
    link
    fedilink
    arrow-up
    2
    ·
    edit-2
    2 days ago

    Do you think Aurora is a good choice for beginners? A friend of mine wants to switch and I’m still looking for a good match.

    It should be immutable, use KDE, have Nvidia drivers pre-installed (or a UI for installing them), not be maintained by a single maintainer and should not have non-OS applications like Steam pre-installed.

    Aurora so far seems to be the best choice.



  • Most modern OLED panels on TVs and monitors don’t actually use classic PWM for dimming, they never turn off completely and instead fluctuate between like 100% and 95% brightness based on the refresh rate.

    Did you ever test if you can see that as well at different refresh rates?

    rtings always tests this under “Image Flicker”. https://www.rtings.com/monitor/tests/motion/image-flicker

    It’s not considered flicker-free but the OLED panels listed with 0 Hz PWM frequency (most of them) should look fine.

    However, there are two other elements that might cause issues:

    • VRR flicker
    • ABL dimming in HDR

    Both can cause an unpleasant experience if you are sensitive to it.

    Phones still commonly use PWM because it uses less energy. There are some that have a DC dimming option but it’s rare.







  • and you’re trusting this WAY too much.

    I don’t need to trust because I know how it works: https://github.com/jellyfin/jellyfin/blob/767ee2b5c41ddcceba869981b34d3f59d684bc00/Emby.Server.Implementations/Library/LibraryManager.cs#L538

    Tools like shodan will categorically identify EVERY jellyfin instance that scanners will run into.

    They can’t. Without the domain, the reverse proxy will return the default page.

    No. Read the whole thread.

    I did.

    If your path is similar to my path

    It does not need to be similar, it needs to be identical.

    • There are 2 popular Docker images, both store the media in different paths by default
    • You do not have to follow the default path
    • The server does not even have to run in Docker
    • The sub path is entirely defined by the user
    • You do not know the naming scheme for the content

    There are 1000s of variations you have to check for every single file name, with 0 feedback until you get a hit. After you have gone through all that trouble, you can now confirm that the file exists and do great things like retrieve the cover art or the subtitles. None of which is incriminating or useful.

    All it takes is for one angsty company to rainbow table variants of their movies name to screw you completely over.

    My threat model does not include “angsty company worried about copyright infringement on private Jellyfin servers”.

    Why bother scanning the entire internet for public Jellyfin instances when you can just subpoena Plex into telling you who has illegal content stored?


  • You are reading too much into the issue linked.

    In order to actually abuse any of the unsecured endpoints, you need to have knowledge of the domain, the media/user/stream IDs and media paths. You don’t get those unless you have a user on the Jellyfin instance and brute forcing them is not practical. If you trust the users you add to your Jellyfin instance, there is not much risk in exposing it to the internet.

    Those issues definitely need to be addressed at some point, but it doesn’t make Jellyfin exposed on the internet open to anyone.





  • (grateful for flatpaks for once!)

    That’s how I run my system right now. Fedora KDE + pretty much everything as Flatpak.

    Gives me a recent enough kernel and KDE version so I don’t have to worry when I get new hardware or new features drop but also restricts major updates to new Fedora versions so I can hold those back for a few weeks.

    I made a similar switch as you but from Ubuntu to Fedora because of outdated firmware and kernel.