arghwhat

821 ms·

2611.
by arghwhat 10y ago
If you are running an Android version that legitimately bundles Google Play, the Android release itself was either directly shipped by, or shipped by someone controlled by Google. I am not saying we shouldn't care about problems becaus
2612.
by arghwhat 10y ago
Yes, it is isolated with interaction through IPC and intents, although Google Play Services have a lot of permissions, it is a normal "app". To communicate with it, you use a Google-provided, obfuscated library which potentially c
2613.
by arghwhat 10y ago
Oh, thanks for the heads up.
2614.
by arghwhat 10y ago
> Because the likelihood of an a-priori exploit hidden in AOSP is far more remote than the possibility of malicious exploitation, at some point in the future, of the gaping wide security hole that is the "give Google root" subs
2615.
by arghwhat 10y ago
I appreciate how well this service is made. It's fast and looks nice without any useless dynamic crap to slow it down. You don't need JavaScript and 200 resources to make a nice page, and it is indeed amazing how fast a page gets
2616.
by arghwhat 10y ago
No. I'm saying that if you're trying to fix an engine leak, start with the giant hole in the block from the anti-tank round that was fired at point blank at it instead of starting with the leaking gasket.
2617.
by arghwhat 10y ago
tl;dr: this is stupid. People seem to love analyzing security of tiny corners of systems while ignoring the rest of the system, and entirely avoiding figuring out a scope for the security. The post complains about Signal using a Google serv
2618.
by arghwhat 10y ago
That protects you (to some extend) from page A accessing resources from page B. Same origin policy doesn't do anything to stop you from being tracked, though.
2619.
by arghwhat 10y ago
Moving your mouse over the window, despite not interacting with it, will allow the page to track your cursor, and could provide a surprising amount of information. That's why I wrote "over".
2620.
by arghwhat 10y ago
Text select and copy raises the respective events in supported browsers. See https://developer.mozilla.org/en-US/docs/Web/Events/copy for the copy event.
2621.
by arghwhat 10y ago
Yes and yes - Right click raises an event, and copy specifically raises an event. If in doubt: If it happens over or in a browser window, it is probably trackable from JavaScript. See: https://developer.mozilla.org/en-US&#x2
2622.
by arghwhat 10y ago
That's optional. Plex has local account management. The iOS app hides it a bit, but it's there. You of course lose the plex.tv features (plex pass, etc.).
2623.
by arghwhat 10y ago
Can you, from the device, chose how to transcode and apply subtitles, select different video/audio tracks, potentially trigger ahead-of-time transcoding, etc.? Fixed device profiles are not particularly useful. I may be mistaken, but I
2624.
by arghwhat 10y ago
How is plex.tv, their simple redirection service, pushed down your throat? You don't need to use any of that. I have both running, but unfortunately, the Emby server just burns resources like there was no tomorrow, and you can't r
2625.
by arghwhat 10y ago
What you're looking for specifically is a DLNA server, then. That's not necessarily a part of a media server solution. I suspect it's a bit of a dying tech - it never worked that well, support was limited, and better options
2626.
by arghwhat 10y ago
Plex does DB backups. You just tell it where to do it, and it'll do backups at some specified interval. I haven't tried to restore, but I keep the backup in a separate location.