It was always junk. 'Cleaning' the registry, which has always been snake oil at best and potentially break Windows at worst. Even Microsoft doesn't recommend registry cleaners.
The only disk cleaning tools you need are provided in Windows by default.
10+ years ago it was okay. Today, not so much. And while the registry "cleaning" might never have been "useful", I did use it on a "why not" basis and didn't have an issue, ever. Also noticed no positive effects.
But either way, the Microsoft that makes random hardware demands for Windows 11 to turn computers into landfill isn't what I would take recommendations from. Or much anyone else, either. Just by using Revo Uninstaller I am just constantly amazed at how much stuff software leaves around in the registry and on disk. I recently uninstalled Keybase because I wasn't really using it but noticed it had accumulated 200MB of log files (for nothing, for running in the background basically), and after uninstalling it, RU found an additional 400+ MB of leftover files. And that just rubs me the wrong way, and even if it doesn't measurably slow down the use of the system, just having all sorts of orphaned and 100% useless data checked for changes every time a backup runs is reason enough for me to get rid of it.
FWIW, my system doesn't seem to get slower over time, and I do attribute that to caring too much about and fiddling with things I'm not supposed to care about. I don't recommend it to others -- if you know enough and care enough to do it, you're doing it already -- but you can pry that from my cold, dead hands.
Systems don't really get slower over time because of used disk space. It used to be somewhat true when HDDs, and bad ones at that, were more common. Nowadays though what's left on your 2 TB <$70 2 GB/s SSD storage matters little so long as your drive isn't near completely out of space to the point it can't place things easily. Background apps/injections are another thing though. You can never uninstall an app for 10 years and your computer will be none the slower for it as long as you disable them from automatically starting up, loading 5 background services all the time, and having poorly written hooks into things like Explorer which constantly get loaded every time you open a file dialog.
Tinkering for tinkering's sake can definitely be fun though and there's nothing wrong with that. Sometimes poking at things, and sometimes breaking them, is a great way to learn new things or even just scratch a casual itch.
Yeah I kinda conflated two things there. One thing is that do I do poke at things a lot, I regularly run Sysinternals autoruns just out of curiosity -- which also "can potentially break windows" (what can't?), poke around in Process Explorer or even run Process Monitor occasionally to just filter out everything for which I know the reason, to see what else is going on. I remove stuff from context menus I don't want there, you name it. All those little things do add up, even if it just reduces the number of things I have to scroll past when doing other things. But I admit that I mostly enjoy doing it.
But while SSD changed everything obviously, in addition to daily partition-based backups I also make manual backups to my NAS with FreeFileSync, just so I don't have to restore full disks when I only want to pull a few files from the backup. While FFS is crazy fast checking for changed files, all those orphaned files are still not free... it's not about the size so much as about the number of files, doubly so when it goes over the network. I also rather often search my whole system for stuff, and there too, files and directories that don't exist are the quickest to search.
I wouldn't want to keep them around in the same way I wouldn't want to run a script that puts 100k tiny files with random content all over the place. Because it's just a pointless waste. And since I enjoy the process, I don't count the time I am using on that, so in my mind, I'm being frugal in a weird, misguided sort of way... I know I could spend the time to make more money and then just buy another HD, but I don't wanna :P
Especially when you make your own cleaners [0][1], which you can also can selectively invoke via the command line (and of course do that via schedule / cron etc.)
Hahaha you discovered it! Originally I had waterloo because I study there, but I removed the city from the picker as I thought HN wouldn't know what Waterloo was :).
It even supports GO buses between Waterloo <-> GTA (unfortunately the max is 3 hours so you can't get everywhere just yet).
You can do it yourself. I used to drink a lot of sweetened soda. I switched to diet, then stopped. Regular sugar-sweetened drinks taste sickeningly sweet to me now, and diet drinks taste like chemicals.
Once you break the habit, your sense of taste recovers and you realize how nasty these drinks are. Most people get started on them as kids when you don't have a nuanced sense of taste and really crave sweet stuff.
Same. I used to drink multiple Cokes a day. I switched to Diet Coke sometime in my late 20s. In my 30s I cut back to one Diet Coke a day and about 4 years ago in my mid 40s I switched over to carbonated water when I crave something fizzy but still limit myself to one a day most days. Coffee and plain water have replaced the soda I used to drink.
This was all done over time as I realized I needed to change my diet to keep weight off and I wasn't really enjoying my daily soda(s) anyway. With an actual intent, one could drop soda within a few months easily and never miss it.
Until you realize caffeine has long term negative effects on sleep even at low doses. Only the pure water drinkers can claim any moral high ground! (I’m not one of them)
Why would there be? Sugar is good. Products with sugar are good. Self control is also good. People can like products with sugar and exercise self control, so there will always be a demand for mass produced products with sugar, and that's a good thing.
Self control doesn't reduce the amount of sugar that's already added to the soda I would like to drink. It just means I don't get to drink it. I have to go find low-sugar sodas. I would like to have more options.
No chance there would be a switch. Consumer tastes and eduction aren't going to change.
Short of that, I wish there was clearer and more consistent labeling. I avoid sugar and sweeteners. Its annoying to be in the mood for a flavored drink, see something that claims to be zero sugar/all natural/etc, grab it in a hurry, then discover on the first sip its got erythritol in it. I read the label, but sometimes I miss it. My preferred options are unsweetened iced tea, coffee, or flavored water. Those are reliable, but can get boring.
Food is generally easier. I just avoid anything that has (or should have) a lot of carbs as a rule when looking for convenient pre-packaged food. No point in sweetening a can of sardines...
I just started brewing my own tea and coffee, unsweetened. Snack foods are a bit harder, but we are better off eating whole fruits and vegetables anyway.
How much has been fixed for this, as of June 2023?
I quite like it has a Plex replacement, it passes the "partner test" AND the "parent test" - they can both install the app and watch what they want (as long as they turn off the android player default, which is a terrible default).
I have it behind a firewall so nothing can access it (it's just for home, or for those who need it, over Wireguard). When i have time, it could be a good experiment for Podman or some other way to run rootless containers/jails.
You should probably never expose a service like that directly, no matter what it is, to the internet, at least have it behind something like Tailscale.
Many of these don't seem too bad to be honest. A lot of these are information disclosures that require knowing very long tokens.
The LDAP addon listing credentials is bad. The rest seems like it shouldn't be a problem for normal (in-home streaming) usage; i.e. users reading each other's last login time shouldn't be a problem if you trust the people you share the server with.
That's really the key point here: Trusting the people you share the server with.
Jellyfin is kind of binary in that regard. Once you're authenticated - no matter the privileges - you can reach a lot of places.
I've written about this recently, if anyone's interested.
Like others have mentioned, you should probably only expose the server to a trusted group of users (ideally not directly on the Internet).
Definitely. I know there are people who share Plex servers with tens or even hundreds of people, and for those types of use cases you'll definitely want to avoid Jellyfin, but that's not what Jellyfin is intended to be used for.
I don't think standard users can change important system settings, but I've always assumed that they can look at stuff like logged in users and the current state of the system.
It seems that most of these issues are not really a problem if the system is used for a small set of people on LAN only, with VPN if needed elsewhere.
Perhaps the browser local storage is an issue, but may be mitigated if the credentials are only useful for that LAN service, with no way for someone to access outside the LAN anyway. Although I'm not a security expert so I may be missing something here.
I've given jellyfin a test-drive a few years ago, it was nice but I ended up back with plex. Thanks for the link (and thanks to those who compiled it!). Enumerating all the potential security issues is important for something that runs 24/7 from the home network. That's a decent sized list, would give me pause on giving JF another test run.
