MangoPenguin

@MangoPenguin@lemmy.blahaj.zone

• ⁨Comment⁩ on ⁨How do you isolate a printer in your homelab?⁩ ⁨⁨1⁩ ⁨day⁩ ago⁩:

  If you just want to stop it from having internet access then a firewall rule set to block from its source IP, and dest !=LAN would do it.

  For IP changes you just need to make that lease static in OpenWRT and it will be fixed to that IP going forward.

• ⁨Comment⁩ on ⁨Self-Host Weekly (6 November 2026)⁩ ⁨⁨4⁩ ⁨days⁩ ago⁩:

  Isn’t that generally what external auth providers are designed for?

  I imagine it isn’t much of a concern if Immich isn’t exposed to the internet.

• ⁨Comment⁩ on ⁨Time to start over...Thoughts on Umbrel OS?⁩ ⁨⁨6⁩ ⁨days⁩ ago⁩:

  I think they’re neat, and can make it easy to get started.

  However, when something breaks it can be really difficult to fix, as you have no idea how things are set up under the hood. Often if an app isn’t in the ‘store’ it can be much more difficult to run it as well.

  So upsides and downsides, easier to get started, harder to maintain imo.

• ⁨Comment⁩ on ⁨For users with public facing services: How does the current explosion of AI-discovered vulnerabilities affect your threat model and willingness to be public facing?⁩ ⁨⁨2⁩ ⁨weeks⁩ ago⁩:

  I’m re-thinking a few things, mostly moving exposed services onto a VM or two that are on their own VLAN, and don’t contain any important data (it would be my website, gameservers like Minecraft, etc…).

  I already use a VPN via Wireguard on my router for access to my private services when out of the house, so my changes are just separating the public from the private as much as possible on the server side of things…

• ⁨Comment⁩ on ⁨Which domain registry or specific TLD do you prefer, and why?⁩ ⁨⁨2⁩ ⁨weeks⁩ ago⁩:

  I generally stick with the main TLDs. Like com or net.

  .com is fairly cheap and won’t be on any blocklists, where some other TLDs can be.

• ⁨Comment⁩ on ⁨Plex vulnerabilities being exploited in the wild to drop a cryptominer⁩ ⁨⁨2⁩ ⁨weeks⁩ ago⁩:

  There have been a few major ones this year, I’m sure they are fixed at this point though. app.opencve.io/cve/?vendor=jellyfin

• ⁨Comment⁩ on ⁨Plex vulnerabilities being exploited in the wild to drop a cryptominer⁩ ⁨⁨2⁩ ⁨weeks⁩ ago⁩:

  Plex uses a code signin system where you open the app on your phone or just a browser, and enter the code there.

  So there’s no typing/entering anything on the TV at all.

• ⁨Comment⁩ on ⁨Plex vulnerabilities being exploited in the wild to drop a cryptominer⁩ ⁨⁨2⁩ ⁨weeks⁩ ago⁩:

  Jellyfin has plenty of issues with public instances too. It’s just the reality of exposing to the public internet, unless it’s something that has a lot of dedicated work going into security it’s going to have problems.

• ⁨Comment⁩ on ⁨Plex vulnerabilities being exploited in the wild to drop a cryptominer⁩ ⁨⁨2⁩ ⁨weeks⁩ ago⁩:

  If it breaks I either fix it (often it’s just an issue where the new version needs extra config added), or roll back to a backup if it really went wrong and I can’t recover otherwise.

  Backups run early AM before any auto updates start, and no one is using services and changing data then, so nothing should really ever be lost by rolling back.

• ⁨Comment⁩ on ⁨Plex vulnerabilities being exploited in the wild to drop a cryptominer⁩ ⁨⁨2⁩ ⁨weeks⁩ ago⁩:

  It’s easier to setup and use for less technical people, also just more widely known.

  I run Jellyfin but logging in is a pain, have to manually enter the URL (including https for some crazy reason) and username and password using a crappy TV remote.

• ⁨Comment⁩ on ⁨Plex vulnerabilities being exploited in the wild to drop a cryptominer⁩ ⁨⁨2⁩ ⁨weeks⁩ ago⁩:

  Wildcard SSL does help a lot, since every subdomain isn’t broadcast publicly in the cert logs.

• ⁨Comment⁩ on ⁨Broken Arrow devs confirm their anti-cheat will not block Linux, SteamOS⁩ ⁨⁨1⁩ ⁨year⁩ ago⁩:

  What does compiling your own kernel do that lets anticheat be bypassed?

• ⁨Comment⁩ on ⁨Windows 11 Start Menu Revealed as Resource-Heavy React Native App, Sparks Performance Concerns⁩ ⁨⁨1⁩ ⁨year⁩ ago⁩:

  The start menu should not lag even on a 10 year old computer, that’s just absurd.

• ⁨Comment⁩ on ⁨Am I the only one pissed off at these holiday sales? (US)⁩ ⁨⁨2⁩ ⁨years⁩ ago⁩:

  Yup, stagnant inventory is a huge drain on resources.

• ⁨Comment⁩ on ⁨Am I the only one pissed off at these holiday sales? (US)⁩ ⁨⁨2⁩ ⁨years⁩ ago⁩:

  It depends, sometimes sales are at a loss for the company to simply clear out stock that they were not selling quickly enough.