_Nemo_

joined 1 day ago
[โ€“] _Nemo_@lemmy.ml 5 points 2 hours ago

unless you rip the movie out into a single file first

I don't see the problem with that. It's what I've done with every single disk I own. Why would I bother with badly-written menus, pointless extra content and tons of ads and copyright warnings I need to sit through before I can watch what I paid for?

[โ€“] _Nemo_@lemmy.ml 6 points 3 hours ago* (last edited 3 hours ago) (1 children)

You patched the annoying "crash-on-start" bug! ๐Ÿ˜ I was collecting diagnostics to help nail it down, but you guys were faster. Keep up the great work! ๐Ÿ‘๐Ÿ‘๐Ÿ‘

[โ€“] _Nemo_@lemmy.ml 7 points 3 hours ago

Leave the poor Russian bot alone. Shilling fossile tech and vilifying Europe for responding to Russia's aggression is hard enough as it is.

[โ€“] _Nemo_@lemmy.ml 5 points 8 hours ago* (last edited 3 hours ago)

Qwant is nice, but it keeps blocking my VPN and locks me out if I happen to use a non-European exit node ("We're not offering Qwant in your region"). And I'm not pulling down my mask for a fucking search engine.

If you're willing to put up with Duckduckgo but hate AI search, there's https://noai.duckduckgo.com/

[โ€“] _Nemo_@lemmy.ml 4 points 1 day ago* (last edited 23 hours ago) (1 children)

Thank you! While that does allay most security concerns, it does beg the question how useful such a vulnerability tracker is if it doesn't actually show any relevant vulnerabilies and you constantly have to second-guess what it says. Warning signs that aren't actually warnings because it's "just a false alarm" quickly teach personell to not take warnings seriously - unti, onel day, it's not a false alarm...

[โ€“] _Nemo_@lemmy.ml 1 points 1 day ago (1 children)

Thanks for your detailed reply!

To make that happen, the attacker must [...] already have access to the server to upload and process the file, which means that security has already failed.

Do I correctly assume that by axis you mean shell or even root level access? If not, any of my regular users (turned rogue...) could upload a poisoned raw file which nextcloud would process to, for instance, generate a thumbnail.

 

Apologies if this is a rookie question, but I keep wondering what the vulnerabilities section on DockerHub is trying to tell me. Take nextcloud images for instance: The most current images seem to list 3 critical and 22 severe vulnerabilities. Does that mean those vulns are part of the image? If so, why would anyone want to run this?