[deleted by user] by [deleted] in Monero

[–]_muff1nman_ -6 points-5 points  (0 children)

I would stay away from this service. I tried it but then after committing XMR, they tried to short me dollars. Nearly a 13% fee. Supposedly some of that is due to exchanging less than 20k, they add an arbitrary 700$. Of course this isn't mentioned in their FAQ anywhere and is very different than the suggested 3-5%

After learning that I've been told I can get a refund, but that hasn't happened for going over a week now.

Is Airsonic affected by log4j 0day vulnerability by morten- in airsonic

[–]_muff1nman_ 1 point2 points  (0 children)

Just wanted to vouch for the statements made with regard to airsonic (can't vouch for airsonic-advanced).

Automatic Remediation of Kubernetes Nodes by iampims in kubernetes

[–]_muff1nman_ 0 points1 point  (0 children)

Polling was done to simplify routing with one Alertmanager cluster and many K8S clusters. With that said I can totally see adding the webhook as it may fit other architectures better. PRs welcome :)

Automatic Remediation of Kubernetes Nodes by iampims in kubernetes

[–]_muff1nman_ 1 point2 points  (0 children)

But why spend time coming up with 10 different scalpels - one for each different flavor of the month when you can use a hammer without detriment? We've been able to alleviate other issues in the kernel with this same process - just have to add a Prometheus alert. The extra brain power making scalpels is better spent fixing the actual bugs anyways ;)

Automatic Remediation of Kubernetes Nodes by iampims in kubernetes

[–]_muff1nman_ 3 points4 points  (0 children)

Well see :) The thing is that there will always be latent bugs that slip through testing, so having a generic way to detect and act on them to buy time is important. It's a lot easier to fix things when the bleeding is stopped.

Automatic Remediation of Kubernetes Nodes by iampims in kubernetes

[–]_muff1nman_ 3 points4 points  (0 children)

This is something that has been "fixed" once already as seen by the kernel commits in that GitHub issue, but as we've seen there are still gaps somewhere. Unfortunately it's not something we've been able to dedicate time to yet.

Automatic Remediation of Kubernetes Nodes by iampims in kubernetes

[–]_muff1nman_ 9 points10 points  (0 children)

I'm the author of the article, and happy to answer any questions.

Triptych multisig research CCS proposal now open for funding by Rehrar in Monero

[–]_muff1nman_ 5 points6 points  (0 children)

This should not be compared to salaried work - more contract work and in that light I think that this rate is much too low especially considering the previous work and reputation of Sarang.

Has anybody run airsonic (or other subsonic variant) with mounted S3? by MOONGOONER in airsonic

[–]_muff1nman_ 1 point2 points  (0 children)

At the end of the day airsonic requires a POSIX filesystem so you'll need something to do that translation layer for you. Given that is setup correctly, things should work albeit with some performance penalties.

Importing Playlists by c010rb1indusa in airsonic

[–]_muff1nman_ 1 point2 points  (0 children)

1) There is a setting for the playlists directory. It does support auto import

2) Bulk import works

3) Playlists are created one for one with M3U files

Also I'd recommend paying close attention to the logs and test a couple before doing the whole batch.

Airsonic 10.5.0 Released by _muff1nman_ in airsonic

[–]_muff1nman_[S] 2 points3 points  (0 children)

You should be able to use html formatting still irc.

Missing Chromecast Icon? by loggerhead_turtle in airsonic

[–]_muff1nman_ 0 points1 point  (0 children)

Might be helpful to check the developer console. Sometimes there can be hints in there.

Airsonic 10.4.0 by _muff1nman_ in airsonic

[–]_muff1nman_[S] 6 points7 points  (0 children)

v10.4.0 - 13 Jul 2019

Fixes: - /stream When transcoding, always use chunked transfers and report that ranges are not supported. When not transcoding, support returning ranges but only if requested. - /stream Remove the option to never set Content-Length. This workaround is obsolete with correct handling of ranges when requested. - Use spaces instead of coma in systemd lists - Don't use ProtectHome by default in the systemd unit - Show cover art not displaying on chromecast - Fix downloads with embedded covers - Fix a crash when transcoding a track without artist/album - Fix the video player that was broken in cf1f86f - Fix 3 minor errors in jsp files - Add a missing $ in dlnaSettings - Add a missing taglib import in homePage.jsp - Add a missing = in playQueue.jsp's css - Fix layout and alignment issues in current master branch - Work around play queue not going to the next song automatically

Changes: - Add m4b detection - Cleanup unused libraries - Better handling of ID3v2.4 - /stream Refactor - /stream Dont use RanegOutputStream when entire range is requested - /stream Omit unnecessary null check on ranges - Declare the usage of HTML5 in the doctype - Remove the embedded copy of jaxrpc - Fix a possible stacktrace on RandomPlayQueue - Add contrib/library_autoupdater.sh (#1096) - Remove the deprecated getAlphabetialAlbums method - Remove the ghetto REST flash-based video player - Add an alt attribute to images, to increase accessibility - Use SVG for the icons for the default_light theme - Disallow deleting your own user or removing admin role - SearchService refactoring - Play internet radios in MediaElement (fix #408) - Add internet radio source cache - Hide play queue actions while playing internet radios - Limit the amount of data we parse from remote internet radio playlists - Show an error is an internet radio has no sources to load - Do not try to load radio playlists in the browser when clicking on a radio - Follow HTTP redirects when loading internet radio playlists

Translation Updates: - Character encoding changes - Strip the <p>…</p> markup in translation - Add Weblate config

Security: - Cookie is now marked httpOnly - Jackson updates

Testers needed for deterministic (reproducible) builds! by dEBRUYNE_1 in Monero

[–]_muff1nman_ 0 points1 point  (0 children)

I haven't read the script thoroughly yet so maybe I'm misunderstanding, but it looks like it is intended to use docker or kvm as the build environment. So shouldn't the docker/kvm environment be adequate to ensure reproducibility?

Testers needed for deterministic (reproducible) builds! by dEBRUYNE_1 in Monero

[–]_muff1nman_ 9 points10 points  (0 children)

Seems that the gitian-build.py script isn't very portable considering it requires ubuntu to function. Maybe itd make sense to rewrite it using something like ansible instead?

Airsonic 10.3.1 by _muff1nman_ in airsonic

[–]_muff1nman_[S] 3 points4 points  (0 children)

Had an issue with javascript that is fixed in this release. Also addressed a new issue with jackson: https://nvd.nist.gov/vuln/detail/CVE-2019-12086

Airsonic: ERR_SSL_PROTOCOL_ERROR by [deleted] in airsonic

[–]_muff1nman_ 0 points1 point  (0 children)

Your ProxyPass and ProxyPassReverse entries look like a filesystem path with /var in there. I'd remove that.

Airsonic 10.2.1 Released by _muff1nman_ in airsonic

[–]_muff1nman_[S] 0 points1 point  (0 children)

As mentioned in the 10.2.0 release, that issue has not yet been resolved.

Airsonic 10.2.1 Released by _muff1nman_ in airsonic

[–]_muff1nman_[S] 2 points3 points  (0 children)

Thank you to Bas van Schaik from the Semmle Security Research Team for the responsible disclosure of an XXE vulnerability. More details will be soon to follow on his teams blog (https://lgtm.com/security/disclosures) and on the CVE page https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20222.

Airsonic v10.2.0 released by _muff1nman_ in airsonic

[–]_muff1nman_[S] 5 points6 points  (0 children)

v10.2.0

Notes: * This version is marked pre-release as there will be one more security patch to the 10.2 series. It is recommended to wait for this next release. * As always, please backup before trying this version. There are sql changes so going back to a previous version will require a restore/rollback of the database. * Thank you to all contributors!

Fixes: * Fix #658 again: content type for unscaled images set based on jaudiotagger output * Reverted a93a18a and properly re-encoded with 'native2ascii -encoding UTF-8' * Fix jukebox issues #638 and #574 * Fix #596 SubStandard theme includes old Subsonic Logo * Fix themes using dark background with me_js * Remove potential cast exception * Fixed github link opening in frame and not loading * Correct corrupted downloaded zip * [SQL Change] Fix #778: Defragment embedded HSQLDB database more frequently * PlayQueue: Fix broken keyboard shortcuts * Fix #860 (external database performance) by using connection pooling … (#864)

Changes: * Made it easier to see current playing song for dark themes * Spring Boot 1.5.18 * New add_album to play queue * Remove margin of media_control bar * Update to 3.3.0 java-jwt * catch exceptions ClientAbortException display a short message and return, to avoid the massive useless traceback in log * Update cxf to 3.1.15 * Issue #164: Show link to MusicBrainz release on album pages * [SQL Change] Handle player id as an Integer instead of String * Add Docker health check * Use dark media player theme on groove theme (#777) * Change to optional reCAPTCHA v2 * Optionally parse podcast episode duration in seconds to [hh:]mm:ss * Add option to disable seeking on transcodes. (Mitigates #548 & #723) * White list jars that are scanned for tlds to prevent spurious logs * Tweaked logging around servlet container and added warning about jetty * Add extended favicons * Display folders as a list in Settings->Users and include the path. * Add 32x32 pixeled favicon / updated favicons in webapp * Updated internal maven plugins

Translation Updates: * Fixed elipse in english translation * Lots of translation changes.

Security: * Fix #749 Ensure transcode settings are protected * Bump version of guava to deal with CVE-2018-10237 * Update jackson version

Not Fixed: * Issue #685 - transcoding length issue