Strit

This reminds me of the Docker issue they fixed in Omarchy recently. Basically you could get root through the docker socket, because the default user groups included the docker group.

Jellyfin is free. What price? :D

Almost true.

It is pretty picky, as it expects a certain folder structure to get all the info correct when importing. But it is fairly easy to go in and manually “fetch” the correct metadata from one of the metadata providers (Amazon, Google Books, Open Library etc). It’s a chore if you have big library with many different structures, but doable if you don’t want to rename all folders.

And you can check the shasum of the binary to see if it actually matches that provided by the developers of the application.

A malicious PKGBUILD, which is what is being talked about, you would see that it downloads a binary that does not come from the developers and so you should not install that.

If the attack happens on the developers repo, not even Linux repository packages would be safe at that point (eg, the xz heist).

Rarely, but I check the PKGBUILD to see if the binary is what I expect it to be.

But if you read the PKGBUILD, you would see that it downloads and runs a black-box binary and should therefore not install it. It’s a little harder with PPAs I think. The build files are not so easily found.

Fair. I have never had a Home Video library, so I don’t know how those are scanned or what they are looking for other than embedded metadata. But yes, sounds like that library type has some issues.

I’ve had initial scans take hours and scans afterwards usually also take some minutes. Why do you think that is an unreasonable amount of time to check all entries for updated metadata?

unending != 40 minutes.

No obvious AI use in the github repo. So probably CBH, but better to get confirmation from @sanitation@lemmy.today .

Looks like a really neat tool though. If you often work in multiple SSH sessions it seems really handy. :)

Disclaimer: Claude and Cursor has done at least some of the work.

I use my Nextcloud instance as a OIDC provider for all my other apps.

You could add a simple startup script that just issues this command when the system is booted.

Where is the source? I could only find the red hatr docker image repository, but no source.

Still one of the best out there!

I would be seriously worried about malware on a random USB stick in the wild…

So this is just a “Manager” for offline websites?

Most calender apps are frontends for caldav…

I use jellyfin for my setup, mostly because I already use it for video.

It can fetch metadata from audioDB or musicbrainz.

I use the Finamp android app to play music and it works really well, even with Android Auto.

It has been fine for my usecase, so I haven’t looked into other solutions.

Almost all RAM and SSD manufacturers have plants or assembly lines in China. So chances are, that whatever you have in your PC right now, is in part manufactured in China. Most hardware supply chains go through China at some point.