🇮🇹 🇪🇪 🖥

  • 0 Posts
  • 59 Comments
Joined 1 year ago
cake
Cake day: March 19th, 2024

help-circle


  • There are 2 issues here that are being mixed.

    One is women not being allowed to positions of power. The other is with women being underrepresented in certain fields (e.g., stem).

    The second issue is what I am talking about and I don’t think at all that men “choose” not to try certain careers in the same way women don’t “choose” not to study stem and pursue stem careers. For both, social pressure and expectations, an existing field dominated by the other sex with all its implications are factors of discrimination. Strict gender roles are damaging for both men and women, and this is a perfect example.


  • Not OP, but positions like nurses or teachers are very female dominated. It’s not like males cannot reach those positions, but there are social obstacles to that. To make an example from my country, in Italy primary school teachers are > 90% female. I believe in kindergarten they reach 97 or 98%. This is also partially the result of strict gender roles than discriminate both men and women in terms of caring for children (I.e., women are de facto forced to do that, men are pushed away), which then reinforces the social practice of women doing all the caring jobs.

    This is IMHO a problem for both men and women, but probably it’s not from the same perspective as what OP meant…




  • I presume you mean running Plex in host namespace. I don’t do that as I run the synology package, but I can totally see the issue you mean.

    Running in host namespace is bad, not terrible, especially because my NAS in on a separate VLAN, so besides being able to reach other NAS local services, cannot do do much. Much much much less risk than exposing the service on the internet (which I also don’t).

    Also, this all is not a problem for me, I don’t use remote streaming at all, hence why I am also experimenting with jellyfin. If I were though, I would have only 2 options: expose jellyfin on the internet, maybe with some hacky IP whitelist, or expect my mom to understand VPNs for her TV.

    (which doesn’t harden security as much as you think)

    Would be nice to elaborate this. I think it reduces a lot of risk, compared to exposing the service publicly. Any vulnerability of the software can’t be directly exploited because the Plex server is not reachable, you need an intermediate point of compromise. Maybe Plex infra can be exploited, but that’s a massively different type of attack compared to the opportunities and no-cost “run shodab to check exposed Plex instances” attack.



  • Well, as an application it has a huge attack surface, it’s also able to download stuff from internet (e.g., subs) and many people run it on NAS. I run jellyfin in docker, I didn’t do a security assessment yet, but for sure it needs volume mounts, not sure about what capabilities it runs with (surely NET_BIND, and I think DAC_READ_SEARCH to avoid file ownership issues with downloaders?). Either way, I would never expose a service like that on the internet.


  • Not to be “achtuallying” bit VPN is not a way to remote stream, it’s a way to bring remote clients in the local network.

    Likewise exposing services on the internet…not really going to happen esepcially for people - like me - that run plex/jellyfin on their NAS.

    I don’t have a horse in this race, i don’t use remote streaming, I only ever streamed from my nas to my 2 TVs, and I am experimenting with jellyfin. But for those who do need remote streaming, jellyfin is going to be problematic.



  • But yandex is useful for those who search in Russian. The low utilization probably comes from a mostly US/EU customer base, but when it is used, it is useful. I would disagree with disabling it. The best would be letting people decide what back ends to use, but that requires a whole rewrite of the search logic on their side, so it’s not happening any time soon…

    BTW in EU we still use a lot of gas and oil from Russia, so it’s quite difficult to avoid giving them money (especially because we don’t know where energy came from for every product we buy).




  • At least in Europe that’s still quite impossible, who knows what their gas and oil is used to produce. Which means you might buy some european product and also give them money. Anyway, everyone has their lines and I respect that.

    I think most people are unaffected from the actual data, unless they search in russian, which is useful for me as a Russian language learner for example. I mostly search grammar stuff.



  • Technically you could extend that reasoning to plenty of EU countries that also send aid to Israel (e.g., Germany, where Hetzner is located, or tuta, etc.).

    At some point one has to make compromises, and everyone can place the line where they wish. Considering 1000 searches per month, the price is going to be between $0.20 and $3.84 (synchronous). So let’s say $2, which is probably an order of magnitude more than the real cost. Of that 2$, the margin is maybe 1$? That 1$ becomes profit for some Kazakh company, which ultimately means $0.2 in taxes. If this was in Russia, that would be $0.018 to the federal government, but let’s say that it doesn’t matter. Of that, 40% goes in weapons, making it $0.08/month. In 1 year, that’s $0.96.

    Now, as I said I wouldn’t be surprised if this was an overestimation of 10x or more, it also assumes that absolutely nothing goes to Kazakh government, which is fully used to bypass sanctions, and a 50% margin for the company. It also assumes 1000 searches (the average was around 300 if I recall correctly) and that yandex is used for each one of them.

    Every cent count, absolutely, but it’s objectively such a tiny amount that a one-time donation to UA army or some humanitarian relief org will offset you for like 15 years.



  • Sure, but they don’t (their privacy policy is exemplary). They have a whole shpiel about their business model. Just few weeks back they released a feature that makes it technically impossible for them to see who did searches, so no trust is needed anymore. They implemented a very novel protocol, quite cool.

    I have doubts considering they are an american company, but I want to see them succeed. Plus, they are remote, so at least a good chunk of the income taxes from salaries are going outside the US.