They/them preferred, but I won’t be mad if you forget :). Retired programmer. Many health conditions. If I’m uncharacteristically grumpy, I probably have a migraine.

  • 0 Posts
  • 44 Comments
Joined 4 months ago
cake
Cake day: June 23rd, 2026

help-circle


  • Probably fine. But I would be suspicious of any usage of the tool that removes too much of your job. Let’s say for example you can send an A.I. to attend meetings in your place, or an A.I. that automatically does performance reviews and check ins with subordinates. That would be a risky thing to do haha

    I think that’s still a bit in the future yet, though. Just keep it in the back of your mind if you notice the tool “helping too much”




  • Yeah but if it’s just pure HTML you got an ugly-ass website that’s annoying to use. There’s been many JavaScript and css vulnerabilities over the years of course. But yes there was and still is plain HTML issues

    Client side:

    • I vaguely remember some base64 embedded encoding malware.
    • I do believe there was some issues with early HTML, if you had malformed tags, that could bypass checks and balances.
    • Svg, Images, audio, fonts, and video can definitely contain malware. Before you say fonts are a css thing, <font> was a real tag
    • IFrames were the worst:
      • They had too much power in the past and could hijack the page and browser.
      • There was no content security policy back then so they could inject JavaScript into the main page as well.
      • Also they can cover the whole screen and present a normal login screen, and hijack all inputs going through it. Think of it like you’re on dodgey-site.com and it has a full page IFrame to bank.com. This was a common hack back in the day which inspired an entire http header to help prevent this.
    • Anchor tags can link to something dodgey of course.
    • Embedded PDFs were a huge issue.
    • ActiveX and other web applets was just fucked. They were so bad they caused malware constantly. This is where unsolicited toolbars came from.
    • Adobe Flash had many many vulnerabilities over the years.
    • Canvas bugs are still a thing today.

    Server side, you could execute SQL injection and path traversal just via URL before the page even loads. Malware and other issues can be embedded in text inputs. HTML can be uploaded to the server and in some cases replayed on the page affecting other users (comment sections were infamous for this).

    So yeah; a plain HTML page with no JavaScript or css isn’t necessarily safe










  • Jellyfin basically only uses TMDB by default as a metadata provider. I think IMDB enshittified or something like Reddit did.

    TMDB is a lot less mature than IMDB so sometimes the identification isn’t as good. It’s based on user contributions like Wikipedia. It also has “opinions” about the correct episode and season listings of TV shows, which has caused me big headaches in the past.

    You can enable optional plugins in the dashboard to enable other metadata providers like TVDB and Anime DB and more. I decided to just use TMDB and go update the website myself when I notice anything wrong or missing.

    Jellyfin is also much less forgiving of errors… like if you put an episode in the wrong season it will just appear broken