• 0 Posts
  • 210 Comments
Joined 1 year ago
cake
Cake day: May 28th, 2024

help-circle

  • And again - if you put those behind a fail2ban; and you 404 5x in an hour, which is likely - you’ve solved that issue. Had my jellyfin instance publicly available for 2 years on its own VM with passthrough GPU, and haven’t had any issues. People poke around quite often, and get blackholed via the firewall for 30d.

    It wouldn’t stop a dedicated attacker, but I doubt anyone’s threat model here is that intense. Most compromised servers happen from automated attacks probing for vulnerabilities in order to get RCE; not probing for what movies you have – Because having movies on a media server doesn’t prove that you didn’t rip them all off of blu-ray…it just means you have movies.

    You’re not going to have 100% privacy when you put up ANY service on your network. Everything leaves a trace somehow; but I’m starting to think half of you are Chinese spies or something with the amount of paranoia people here show sometimes. :P



  • Do. And make sure your logs are piped through fail2ban.

    All of these “vulnerabilities”, require already having knowledge of the ItemIDs, and anyone without it poking around will get banned.

    The rest of them require a user be authenticated, but allows horizontal information gathering. These are not RCEs or anything serious. The ones which allowed cross-user information editing have been fixed.





  • Do program. But ARK: Survival Ascended, and the studio behind it - Wildcard - Are absolutely the most atrocious group of people to have ever graced gaming.

    They set release dates, and not once in nearly 10 years have they ever hit a target - and not by like days or something, sometimes years. They planned a map release a year ago, and have pushed back its release date like 6x now. They adjust 1 thing only to have 5 other things break. They constantly blame their playerbase. Some of their modding community are better as 1-man-teams than their entire staff seem to be at UE5 development. I’ve seen single people release maps and content that rival Wildcard’s entire production team.

    Either there’s a LOT of nepotism going on, or they’re plain incompetent. And I greatly subscribe to the idea of “Never attribute to malice, what could easily be explained by stupidity”. Because never once have they actually been malicious. They care for their game and community, but holy shit are they god-awful at it.












  • kitnaht@lemmy.worldtoSteam Deck@sopuli.xyzGaming 2024
    link
    fedilink
    arrow-up
    4
    ·
    edit-2
    8 months ago

    I managed to get my whole family some really good office chairs because a local business chucked them all in a local dumpster. Most of them just needed to have the foot-rests removed to be completely perfect. I looked them up, and they are all $600+ chairs brand new. Dumpster diving has always been fun :)