Pup Biru

and thus in this case worst than useless: dangerous

i’d say that’s mostly reasonable… not to say you can’t mess around in the guts of python, but you can mess around a lot more in c

the flip side of this is that python has a lot more guard rails: it’s simply impossible to write entire classes of sometimes very dangerous and subtle bugs in python code, while in c… go for it! that’s valid operations that you may have decided to do for performance reasons (also a reasonable argument, but if you know you’re not doing this fuckery then maybe it’s better to just let software not let you do them by accident or on purpose)

right? like if white space weren’t required, how would you format your code differently? arbitrary white space all over the place? no indentation? that is some spicy garbage code

…button

which they handled about as well as you can: prompt and clear notification without trying to pass the buck

the potential of a data breach is just a fact of life with any SAAS product - bugs happen… and it’s exactly the SAAS part of the product that makes the invites/login/aggregation of servers so smooth

there are some admin endpoints that are authenticated using any local IP, but the method they use allows spoofing the IP so those endpoints become accessible essentially without authentication

there were some other issues to do with unauthenticated enumeration and playback of content i believe too

i’m not likely to wrangle installing and maintaining wireguard on my mums cheap smart tv

and if that’s the solution, as i said you get plex local playback so that’s free still anyway

my main issues

• jellyfin has known security vulnerabilities and shouldn’t be run on a public network. that means everyone using your server remotely needs to be on a VPN… and then you may as well use plex because it’s “local” so the remote streaming thing doesn’t apply
• swiftfin (which i need for apple tv) doesn’t support media segments

the thing that everyone always glosses over is that jellyfin should not be run on a public network. it has known security vulnerabilities… that includes VPN remote proxy, so now you have to have external users on your actual VPN, and if that’s the case then plex will work fine because it’s “local”, and has a lot more features

(and my main issue: media segments don’t work on swiftfin)

yeah viable is such a variable concept

i guess like… i have a friend that is a lab tech, and he vibe coded a stand alone HTML and JS page for their team to take CSV and filter it… the excel process they used before was horrendous… in that case, i guess that’s a viable product: it works, isn’t buggy (or at least bugs will become well known and able to be manually avoided or worked around)… i’d say that’s an MVP but wouldn’t be so if you wanted to productise it

vibe coding is trash for MVPs… it’ll get you there, but as always the achilles heel of vibe coding is maintenance and bugs

vibe coding is great for a POC, but the defining difference between a POC and an MVP is that a POC is made to be thrown out, doesn’t have to work all the time (you can say “ah yup just need to give it a kick” when you’re showing it off and manually intervene)

vibe coding is good to show a basic, unmaintainable, non-production version of a feature of function, but then you need to take that and manually build it into your MVP - perhaps by copying some minor parts of the POC, but verifying every step

if you’re taking about charlie kirk with that “civil conversation” bit, those conversations were using misleading half truths to publicly debate people he disagrees with in order to convert the people around said debate to his cause. i wouldn’t call that civil… civil is healthy, truthful debate on the merits: not winning at all costs

honestly the text kinda looks like it’s AI generated… has weird kerning, things aren’t quite right

i’ll add a concrete example to this… i’ve described a startup i built in another comment but TLDR:

compliance obligations when protecting kids from sexual predators are difficult to prove: sexual abuse usually comes out 30 years later, so standard record keeping is pretty fraught… companies (like the company monitoring compliance - our startup for example) might not exists any more, paper gets lost, database formats become difficult or impossible to read

writing signed proof of compliance to the blockchain is a way of ensuring that an organisation was doing what they could at the time… how this is achieved is tricky for anyone but the source of record, but with blockchain it’s possible (described in the post)

it’s not technically legal afaik… the license defines a user pretty rigorously

“creamy” is a pretty common positive attribute for ice cream

security by obscurity doesn’t work on its own, but is a single pillar in a multi-faceted security strategy. in the case of FOSS vs closed source, the down sides (not having eyes on it, etc) outweigh the up sides… but writing off security by obscurity (plus other security) in all cases is the wrong approach to take

well i mean NZ is in K and has pretty tame wildlife, but also a lot of the nasty aussie wildlife is up north… and also our wildlife is only really dangerous if you don’t respect it… ain’t nobody treating wildlife with the respect it’s due dying from it

ah! sorry i misread/misunderstood privacy to mean security in your comment :)

you sir/maam have not seen the netflix talk on using IPv6 for their full internal stack because of inefficiencies allocating IPv4 ranges i’m guessing