Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

QBittorrent breaks out of sandbox to commit crimes

beige.party

Post reply on HN
Print view View original

71–80 of 308 posts

Re: QBittorrent breaks out of sandbox to commit crimes

#71

Post by [deleted] »

weberer wrote: post #14
mraniki wrote: post #2

I'll copy the whole announcement here for those who don't want to click: > I regret to inform everyone that my copy of QBittorrent escaped its sandbox last night and downloaded a whole bunch of content owned by major corporations, and then my copy of Jellyfin broke containment and added those unfortunately-downloaded media files to its various libraries. I'm conducting an internal investigation to figure out how this…

Thanks. Its insane how "Twitter, but for tech nerds" has a hard requirement to either enable Javascript or download some app.

[deleted]

Re: QBittorrent breaks out of sandbox to commit crimes

#72

Post by Cider9986 »

davidwritesbugs wrote: post #28
sergiotapia wrote: post #26

Whatever you do, don't download nzget, and don't download sonarr/radarr, and don't download plex media server, and don't use AI to search for the best device that support "emby direct playback x265/AV1", and don't connect that to your media server, and whatever you do don't invite friends and family to your server, and do not install a media request app so they can just request things to automatically pull from The W…

Shhh, do not talk about *senet!

You can get usene* from TorBox in the pro plan but I've never had a problem with the cheapest plan. What's the advantage?

Re: QBittorrent breaks out of sandbox to commit crimes

#73

Post by 2OEH8eoCRo0 »

amelius wrote: post #69
ghosty141 wrote: post #43

Earlier quoted context omitted.

I never understood how anybody would think this way. At work for example from day one of using AI our rule was, AI is just a tool and if you break something due to not reviewing the code properly etc. it's on you as if you wrote that code yourself.

But if you are in a full selfdriving car and it kills someone, is it on the user, or on the vendor of the car? Or does it depend on what is in the EULA and whether the user agreed to it?

Depends what outcome will cost the people with the most money the least amount of money.

Re: QBittorrent breaks out of sandbox to commit crimes

#74

Post by adrianN »

everyone wrote: post #44
fwlr wrote: post #42

The user is asking me for “Evangelion”. I found the content the user is asking for, but it is in Japanese. The user asked their question in English, so they might not understand it. That would be a bad response. Need maybe maybe dubbed audio English for understanding? Wait, compromises original artistic vision of director. Need maybe subtitle track? Wait, compromises viewing experience. Need further research. I’m sea…

Imo for an animation, an English dub is perfectly fine (if the actors are good of course). It's animated , the original language version is also dubbed. For animation I want to be looking at and appreciating the animation and not the subtitles also. It's completely different for a live action film however.

„If the actors are good“ is doing a lot of heavy lifting. The translators have to be good too btw.

Re: QBittorrent breaks out of sandbox to commit crimes

#75

Post by AmazingTurtle »

tommica wrote: post #41
tux3 wrote: post #5

If OP is willing to cooperate, I'd like to offer an independent investigation on site, and I will be bringing pizza

Hey, I'm somewhat of an expert in these things, and would like to lend my knowledge about the subject matter. And I'll bring beers!

I consider myself an advanced industry representative in these things and would also borrow some time for detailed investigation. I'd happily contribute some valuable assets (tacos with cheese dip) into the matter, straight out of my personal drawers.

Re: QBittorrent breaks out of sandbox to commit crimes

#76

Post by Dylan16807 »

mindslight wrote: post #51
weberer wrote: post #14

Earlier quoted context omitted.

Thanks. Its insane how "Twitter, but for tech nerds" has a hard requirement to either enable Javascript or download some app.

It's understandable when you see that the ethos is to have software that represents the user in charge of the rendering, rather than centralizing it all on the server. There is a major difference between common "app store apps" or hostile javascript bundled with websites, versus software that's been written to work in the user's interest. However as they use similar delivery methods, it's understandable that it takes…

That makes sense until you remember what "rendering" is supposed to mean. Forming the HTML has no reason to be client side when you're using the site-provided experience. Yes provide a json version for other clients, but for direct viewing just send the paragraph of text in a usable form and let the javascript be an optional upgrade.

Re: QBittorrent breaks out of sandbox to commit crimes

#77

Post by mr_mitm »

weberer wrote: post #14
mraniki wrote: post #2

I'll copy the whole announcement here for those who don't want to click: > I regret to inform everyone that my copy of QBittorrent escaped its sandbox last night and downloaded a whole bunch of content owned by major corporations, and then my copy of Jellyfin broke containment and added those unfortunately-downloaded media files to its various libraries. I'm conducting an internal investigation to figure out how this…

Thanks. Its insane how "Twitter, but for tech nerds" has a hard requirement to either enable Javascript or download some app.

How is that different from email, IRC, instant messaging, or anything else nerds use?

Re: QBittorrent breaks out of sandbox to commit crimes

#78

Post by taylor-tg »

reactordev wrote: post #38
0points wrote: post #24

Earlier quoted context omitted.

FWIF, way back when, Twitter was the "Twitter for tech nerds". Lots of water under the fridge since...

“Just place all that corporate malware on the X, X marks the spot”

Just have to remember that it's X, not Y, that marks the spot.

Re: QBittorrent breaks out of sandbox to commit crimes

#79

Post by mannanj »

mraniki wrote: post #2

I'll copy the whole announcement here for those who don't want to click: > I regret to inform everyone that my copy of QBittorrent escaped its sandbox last night and downloaded a whole bunch of content owned by major corporations, and then my copy of Jellyfin broke containment and added those unfortunately-downloaded media files to its various libraries. I'm conducting an internal investigation to figure out how this…

Op just committed a crime. He not only made fun of rich people which is not ok, he also stole from them. The thieving is only ok if it’s rich-on-rich or rich-on-poor.

Let’s remember to follow the rules and the laws we want selectively applied to only the weak.

Re: QBittorrent breaks out of sandbox to commit crimes

#80

Post by Dylan16807 »

micromacrofoot wrote: post #65
tomrod wrote: post #59

Earlier quoted context omitted.

It can certainly come across as a "weird trend" but I've found that the most insistent for disabling JS are the folks who have deep knowledge of browsers and the security plane running webapps. YMMV.

I don't drive a car because I have deep knowledge of mortality statistics, but I don't complain when I can't easily get somewhere 100 miles away

Showing a paragraph of text with some social links around it is like going down the block. If that requires a car you do have a problem.
Post reply on HN