• 0 Posts
  • 23 Comments
Joined 1Y ago
cake
Cake day: Jul 24, 2023

help-circle
rss

Perfect example of a (part of a) security vulnerability being fixed in a commit that doesn’t immediately seem security related and would never be back ported to a stablestale distro

The code which parses the binary MaxMind database after decompression is well guarded as of 2024 but used to look different, potentially providing more attack surface. There is also an interesting commit where a contributor makes adjustments to the gzip::decompress() function which hints at a stack overflow, as the destination buffer was changed from static allocation on the stack to dynamic allocation on the heap, though it was not exploitable due to checks before it is written to



Accessing printers? Resolving hostnames of internal hosts? I can’t imagine having a lan without mDNS


This would not be the default behavior of yt-dlp. Run yt-dlp -vF <video> to view the sort order used. Acodec should come before abr.

It used to be the behavior of the original youtube-dl, however.


Resampling does not lead to any perceptible quality loss, but encoding to aac with libavcodec’s encoder (as YouTube does) definitely will. At the very least, it cuts all frequencies above 15 kHz which are potentially audible. Opus does not, and 128k opus is usually considered transparent.

I can’t find it but somewhere there’s a very detailed explanation from Monty himself about it


Are you using the very latest version? YouTube changed their site again a few days ago and it broke yt-dlps ability to find all thr formats. Update yt-dlp and it should be back to normal. yt-dlp will prefer the opus when it is available by default.

Opus is much better than (YouTube’s) m4a. m4a is better than mp3 (which is an obsolete 30 year old format). YouTube doesn’t serve mp3 (so creating one means re-encoding), and re-encoding lossy formats always loses quality.


yt-dlp is pretty much the standard program for it https://github.com/yt-dlp/yt-dlp

It is installable as a python module, so it should be easy to sandbox if you need to (though it requires ffmpeg too). Nowadays I almost view it as a standard unix utility though and wouldn’t think twice about installing the native package


It’s unfortunate that the other users are ignoring your actual question… You should still be able to bind qbittorrent to the wireguard interface, and you definitely MUST do so in order to make sure you’re safe (if the VPN drops, you don’t want it to fall back on your normal connection). If you aren’t sure what the wireguard interface is names, try running ip a before and after activating the VPN connection and compare them.

Port forwarding allows other users to connect directly to your torrent client. Without it, it’s much more difficult for you to connect to other people who aren’t port forwarded (though not impossible if there’s a third, mutually connected client who can facilitate initiating the connection). Things will generally still work without it, but youll connect to fewer people, so it might be slower. And if you’re downloading rare torrents, you might have to be patient and wait for someone else to join and facilitate the connection


It’s useful for security researchers to collect and analyze what the newest attack bots are trying to do, in order to learn how to defend against it and study the malware they drop. There are some cool videos on YouTube about decompiling malware dropped by the bots.


Are they attempting to listen on the same port, so one of them is failing to? Try setting a different port number for the two



Maybe try Stash, it has gallery support too https://github.com/stashapp/stash

Also, what about jellyfin itself? It also supports photos


It can play local files or videos from url (and even has experimental support for YouTube), much like VLC, so as long as you have the files for the anime, yes. I prefer it because Im learning Japanese and like to use the dictionary lookups on the subtitles as I watch the anime. Though if this isn’t something you have a use for, VLC or mpv will get the job done fine.




I’m only familiar with JAV (Japanese) content, which sukebei.nyaa.si has quite a bit of. I suggest browsing for what you want on javlibrary.com and then search for a download on nyaa


Lots of malware gets hosted using dynamic DNS domains, so they (or more likely some bot) probably saw the domain frequently showing up in malicious activity and blocked it without understanding that it itself isn’t the source of the malicious activity.


You can use cryptsetup-reencrypt to encrypt an existing disk in place with LUKS. Then you just have to modify the initramfs/bootloader/fstab to point to the new configuration. See https://wiki.archlinux.org/title/Dm-crypt/Device_encryption#Encrypt_an_existing_unencrypted_file_system


Just use the nicotine-plus client for soulseek instead. It’s much more stable, and it’s foss


Theoretically, you don’t even have to post it anywhere. Just leave it seeding long enough and it will get picked up by a DHT indexer like btdig.com. However, posting it to some indexer does improve discoverability because not everyone will search btdig.



I used this too. Btw, YouTube does not serve mp3 files. It serves Opus files and (low quality) m4a files. If you select the mp3 output option with spotdl, it converts them to mp3 and you lose quality. To get the highest quality, you must chose the opus option.


Do something like find . -name "*.m4a" -print0 | parallel -0 ffmpeg -i "{}" -c:a libmp3lame -q:a 0 "{.}.mp3"