_Nemo_

joined 2 days ago
[–] _Nemo_@lemmy.ml 20 points 5 hours ago* (last edited 5 hours ago)

Man, your basement has the weirdest carpet I've ever seen. Also, much too bright for my taste. If you can see the keycaps without backlight, you're doing the lighting wrong.

[–] _Nemo_@lemmy.ml 6 points 1 day ago

unless you rip the movie out into a single file first

I don't see the problem with that. It's what I've done with every single disk I own. Why would I bother with badly-written menus, pointless extra content and tons of ads and copyright warnings I need to sit through before I can watch what I paid for?

[–] _Nemo_@lemmy.ml 10 points 1 day ago* (last edited 1 day ago) (1 children)

You patched the annoying "crash-on-start" bug! 😍 I was collecting diagnostics to help nail it down, but you guys were faster. Keep up the great work! 👍👍👍

[–] _Nemo_@lemmy.ml 12 points 1 day ago

Leave the poor Russian bot alone. Shilling fossile tech and vilifying Europe for responding to Russia's aggression is hard enough as it is.

[–] _Nemo_@lemmy.ml 5 points 1 day ago* (last edited 1 day ago)

Qwant is nice, but it keeps blocking my VPN and locks me out if I happen to use a non-European exit node ("We're not offering Qwant in your region"). And I'm not pulling down my mask for a fucking search engine.

If you're willing to put up with Duckduckgo but hate AI search, there's https://noai.duckduckgo.com/

[–] _Nemo_@lemmy.ml 4 points 1 day ago* (last edited 1 day ago) (1 children)

Thank you! While that does allay most security concerns, it does beg the question how useful such a vulnerability tracker is if it doesn't actually show any relevant vulnerabilies and you constantly have to second-guess what it says. Warning signs that aren't actually warnings because it's "just a false alarm" quickly teach personell to not take warnings seriously - unti, onel day, it's not a false alarm...

[–] _Nemo_@lemmy.ml 1 points 1 day ago (1 children)

Thanks for your detailed reply!

To make that happen, the attacker must [...] already have access to the server to upload and process the file, which means that security has already failed.

Do I correctly assume that by axis you mean shell or even root level access? If not, any of my regular users (turned rogue...) could upload a poisoned raw file which nextcloud would process to, for instance, generate a thumbnail.

 

Apologies if this is a rookie question, but I keep wondering what the vulnerabilities section on DockerHub is trying to tell me. Take nextcloud images for instance: The most current images seem to list 3 critical and 22 severe vulnerabilities. Does that mean those vulns are part of the image? If so, why would anyone want to run this?

[–] _Nemo_@lemmy.ml 3 points 2 days ago

Corporate-driven > community-driven distros

[–] _Nemo_@lemmy.ml 5 points 2 days ago (2 children)
[–] _Nemo_@lemmy.ml 6 points 2 days ago (4 children)

Is it Shitpost Saturday already?