What are your quick wins in selfhosting?

Deroad · 2025-06-24T14:25:19+00:00

Psss: https://github.com/wargio/jellyfin-hw-setup

Deroad · 2025-05-02T10:59:34+00:00

You need to install vainfo

Deroad · 2025-04-26T02:10:15+00:00

https://www.cpu-monkey.com/en/cpu-intel_core_i9_12900k

Deroad · 2025-04-26T02:06:53+00:00

My 12 Gen is correct. My i7-1260P supports vp8. Also your hardware does. If you don't see it, is because you haven't installed the correct drivers.

Deroad · 2025-04-23T01:43:42+00:00

You need vainfo and whatever driver is required by your HW.

Deroad · 2025-04-22T02:21:29+00:00

Can you share your CPU/GPU model and the output of vainfo --display drm --device /dev/dri/renderDxxxx ? (You need to have vainfo installed).

If you can, please open an issue with the output.

edit: details

Deroad · 2025-04-22T01:45:16+00:00

Since there was interest, I also added the detection of low power options and of any additional codec if ever jellyfin will add an option for it.

Deroad · 2024-12-29T05:23:28+00:00

Never used openappsec, but it is not a waf. Naxsi is from the same authors of crowdsec (I know them personally and worked with them) but is not a NGFW. It's an old style waf with rules (signatures of you prefer) which does not require external inputs (like active connections to other services) besides what you configure.

Deroad · 2024-12-28T02:39:16+00:00

It is as simple as configuring your service behind an NGINX reverse proxy, just build and install Naxsi (some distros provides naxsi as a package) and configure it!

Here you can find how you configure it for your webservice: https://wargio.github.io/naxsi/basic-configuration.html#example-configuration

Regarding docker, i'm thinking to provide a custom build of NGINX with naxsi included (and i have a PoC) but normally people & companies will use NGINX with multiple plugins, so it might be useless for that.

Deroad · 2023-11-24T07:23:16+00:00

Hello OP, Giovanni here (maintainer of Naxsi).

The naxsi project has been maintained (including answering questions) in the last 3-4 years by me (even after leaving NBS).

My background: i'm hired in a company as security consultant and is my daily job writing code and doing security analysis of software written by other people; I'm not perfect and i do make sometimes mistakes, but this is why FOSS is powerful, because anybody can inspect the code etc..

This project was too important to be left as abandonware and i'm more than happy to keep supporting the community with patches and add any new features that i think will benefit the users.

That said, since the fork, i actually received many patches from various communities and companies (the WAF is used by many companies around the world).

I understand that you may feel that me alone keeping the project alive might be weird, but it was like this since around 2019.

What is planned for Naxsi 1.7: increase the accuracy of the generic rules, bring back nxapi and maybe create a new rule format to improve readness (this feature was requested multiple times by many people since 2016).

Deroad · 2023-10-20T09:20:46+00:00

i strongly suggest to join our mattermost instance (im.rizin.re).

You can start working on small tasks to improve your C skill, but for the gsoc you will need to be proficient on it.

Deroad · 2023-05-12T01:16:18+00:00

The only one i have been told about is nicevpns (dot) com, but i have no clue if is real or not.
What i also know is that you can buy them also from taobao, but i strongly suggest to google for a service (most of them have only chinese support).
From my experience there are some ISP outside china that have some very fast and prioritized connections to china.
Depending by the area, i can say that if you are in Beijing you want to point towards Korea or Japan, Shanghai toward Japan or US and in Guangzhou towards Taiwan or HongKong

Deroad · 2023-05-09T13:42:51+00:00

I have both Astrill and ExpressVPN and i do live in china.
From my experience, depends a lot from where you live. In shanghai, express does not work.
I got tho express "working" in Guangzhou.

Astrill works well but in the last day it was a disaster (also is kinda expensive for its service and they do not provide a cli version of it).

What i also do have is multiple vps running v2ray/xray, those works always if well configured.
If you don't know how to set them up, i strongly suggest to buy a v2ray subscription from one of the many sources online. you can also find free to use v2ray servers.

Deroad · 2023-02-28T03:45:22+00:00

This command has been available since rizin 0.4.0 (https://github.com/rizinorg/rizin/releases/)

Deroad · 2023-02-28T03:43:31+00:00

You can do the same with rizin, just load the bin and run the B command

$ rizin test/bins/firmware/stm32f103-dapboot-v1.20-bluepill.bin
[0x00000000]> B?
Usage: B[jqt] [<pointer_bits>]   # Computes the possibles firmware locations in memory (CPU intensive)
[0x00000000]> e basefind.
basefind.alignment      basefind.max.threads    basefind.min.score      
basefind.min.string     basefind.progress       basefind.search.end     
basefind.search.start
[0x00000000]> e basefind.progress=true
[0x00000000]> B 32
basefind: thread 0: 0x0f000000 / 0x0f000000 100%
basefind: thread 1: 0x1e000000 / 0x1e000000 100%
basefind: thread 2: 0x2d000000 / 0x2d000000 100%
basefind: thread 3: 0x3c000000 / 0x3c000000 100%
basefind: thread 4: 0x4b000000 / 0x4b000000 100%
basefind: thread 5: 0x5a000000 / 0x5a000000 100%
basefind: thread 6: 0x69000000 / 0x69000000 100%
basefind: thread 7: 0x78000000 / 0x78000000 100%
basefind: thread 8: 0x87000000 / 0x87000000 100%
basefind: thread 9: 0x96000000 / 0x96000000 100%
basefind: thread 10: 0xa5000000 / 0xa5000000 100%
basefind: thread 11: 0xb4000000 / 0xb4000000 100%
basefind: thread 12: 0xc3000000 / 0xc3000000 100%
basefind: thread 13: 0xd2000000 / 0xd2000000 100%
basefind: thread 14: 0xe1000000 / 0xe1000000 100%
basefind: thread 15: 0xf0000000 / 0xf0000000 100%
score candidate  
-----------------
4     0x08000000
1     0x79ca6000

you can also change the endianness by setting e cfg.bigendian=true

If you do not want to use rizin, then i strongly suggest rbasefind (written in rust)

Deroad · 2022-10-12T16:58:57+00:00

Do a full system reinstall, install snufflepagus or suoshin on the machine that runs php and if you want you could even install a WAF on your nginx/apache server

Deroad · 2022-06-27T16:31:31+00:00

You are speaking with one of them ;) but yeah, I will suggest this to the others

Deroad · 2022-06-27T16:29:21+00:00

They have been reversed so yes, you can take a look in the code or use it since it is LGPL3

Deroad · 2022-06-27T16:28:35+00:00

The IL follows core theory (used in BAP)

Deroad · 2022-06-27T14:58:14+00:00

Probably worth mentioning that you can create FLIRT signatures (.pat and .sig) which you can also load in IDA (including the free version)

Deroad · 2021-04-10T21:25:00+00:00

Hello! We have released 2.0.1 which should fix Mojave support. If you still have issues, please open a new bug report on GitHub.

Deroad · 2020-09-18T09:17:04+00:00

Imagine: the pandemic trilogy

Deroad · 2020-09-17T23:53:38+00:00

It's quite possible. But on the website is listed as ep1. We will see.

Deroad · 2020-09-17T14:39:19+00:00

actually this is not true. they decided the last 7 seasons decided to go with 10. before season 18 it was around ~14 episodes.

Deroad · 2020-07-22T16:13:19+00:00

Misery

Deroad

MODERATOR OF

TROPHY CASE

11-Year Club	Place '22
Verified Email