I'm finally moving out of my student flat and into an apartment with an actual proper living room. Most things are starting to get sorted, but we have no idea about TVs. Neither of us has owned one before, and our parents' ones were obtained before the advent of smart TVs, so this is completely unfamiliar territory to us. I'm basically asking for some recommendations for things to look at, not necessarily specific models but just... what brands to avoid, what featured to look out for, that sort of thing. Here are some things we want:

1. No ads in the menus or as screensavers.
2. The TV should work as an actual TV, access to channels is included in our internet subscription. That comes with some sort of box, but we don't have it yet so no idea how that actually connects.
3. Able to plug in consoles, hopefully that's a non-issue but want it noted.
4. We don't really use streaming services all that much, but we do use YouTube and Spotify, and both of those I'd like to be able to use on the TV. I pay for premium on both of those and that better work ad free on the TV too. Apart from that the only other streaming service I pay for is Dropout, and it would be nice to be able to access that somehow as well but I'm not sure how that would work (browser??)
5. I have a lot of downloaded and manually sorted media. Movies, series, a lot of anime especially. I would like to be able to access these on the TV. At the moment this lives in a dropbox and gets watched from my laptop, but that's not a good solution (I'm constantly afraid they will eventually just nuke my account, plus it's kinda expensive). I believe what I need is a simple NAS system? Advice on that specifically might be a separate topic but for the time being, I (a) want to be able to stream stuff from my laptop to the TV, ideally without a cable, and (b) it should be future-proof for when I get a NAS.

What to look out for? Can we just grab any TV we like the look of or are we limited to a handful of options?

I'm asking "I" in the sense that I'd personally like an answer to this question, but really this is more about using VPNs in general.

Currently, I just use the server with the lowest latency because that gives me the least friction.

However, thinking about the GDPR in the EU, or California's data privacy protections: should I be strategically choosing a server based on those? Is there any benefit to having my traffic routed through a jurisdiction like that, or does that not really matter?

EDIT: To further clarify: will all the different websites out there log less data or treat my data differently if they believe my traffic is coming from the EU/California?

Hi folks. I'm in way over my head with an AWS problem. Mainly because I don't understand how to use AWS at all, but in 2013 I used a tool called FastGlacier to backup my data (including baby picture and videos) to Amazon Glacier. I also had them on a local drive and a HDD I gave to a friend. Alas, my drive failed a few years ago, and he lost the other in a move.

Anyway, I'm not a coder, and AWS baffles me. I'd like to retrieve these data but don't know where to start. Would anybody well versed in AWS be willing to walk me through the process? The AWS guidance is over my head.

Many thanks in advance.

Just got this email from Framework:

Dear Valued Framework Customer,

We are writing to inform you of a data breach at our business intelligence database provider Metabase that resulted in an attacker accessing customer names, email addresses, phone numbers, and addresses. Your information was in the database that was accessed in this breach. This breach did not include order or payment information.

We have full details on the incident below. We are deeply sorry for this breach of information, and are reviewing and improving our methodology for data storage in external database vendors.

We are also in the process of notifying the regulatory authorities in each region where relevant regulations exist. Note that while regulations in most regions do not require notification for breaches of names, email addresses, phone numbers, and addresses, we are sending this email to you regardless to ensure you have visibility and can take any actions needed.

What happened?

On August 6th, 2026 at 9am Pacific Time, Metabase notified us of a breach of their systems with the following email message:

On Monday, August 3, we discovered that Metabase Cloud was attacked by someone utilizing an unknown (“0-day”) security vulnerability in versions 1.58 and above. We immediately blocked the endpoints used for the attack, then quickly identified and patched the vulnerability. We notified law enforcement, and we have engaged with a third party forensics firm to conduct an independent investigation.

Your instance of Metabase was vulnerable to this 0-day. Therefore, to protect your company, we recommend you:

Rotate the credentials for every database connected to your instance; and

Review the admin accounts on your instance and remove anything you don't recognize.

We also discovered that the attacker was able to gain access to your instance. We created a report on the actions we believe the attacker took on your instance, which includes log files, and which you can get from the Metabase Store at [removed url].

(If you do not have access to the Metabase Store, are having issues accessing the report, or do not want to click on a link in an unexpected email, you can log into your instance directly and reach us at Help > Get help in the grid menu in the upper right hand corner. We'll confirm this message is from us and email you the report.)

This report is based on our own application logs. We did not query or read the data in your connected databases.

Depending on the jurisdictions in which you operate and kinds of data your instance connects to, you may have notification obligations under applicable laws. If you have concerns in this regard, we recommend you assess potential notification obligations with your company’s legal or compliance experts.

We regret any inconvenience this incident may cause you, and we are here to support you. If you have questions, please reply to this email or email us at [removed email address], and we'll get back to you as quickly as we can.

Sameer Al-Sakran

Founder and CEO

Metabase

We immediately investigated the logs Metabase provided to us and confirmed that our database instance was accessed by the attacker. We confirmed that the following information was accessed:

• Full name
• Email address
• Login IPs
• Billing and shipping address information
  • Country
  • Address
  • City
  • State
  • Zip code
  • Phone number
  • Company

For Framework for Business customers, we are investigating whether the following information may additionally have been accessed:

• Company
• Phone
• VAT
• EIN
• Billing Email
• No other personally identifiable information, order information, or payment information was accessed.

Note that Metabase has additionally flagged:

Important: This is a preliminary update based on our current knowledge.

We are working with a third-party forensic investigation firm to understand the full nature and scope of the event.

We are providing you this interim update in advance of completing our investigation to allow you to better understand any potential impact and secure your data.

Our investigation is ongoing and the information shared now is preliminary.

Please look at the application logs as well as the queries executed that are provided as separate files in the zip file for detailed activity and a potential timeline.

We’re providing you notice of the breach in the meantime to ensure you have the earliest possible visibility. In the event Metabase notifies us of additional information that impacts you, we will send a follow-up email.

What was done to resolve the issue?

After we were notified of the breach by Metabase, we rotated credentials on all databases associated with our Metabase instance and confirmed that there were no changes in admin access or access to systems outside of Metabase.

What steps have you taken to ensure this doesn’t happen in the future?

We are evaluating the breadth and depth of data shared with business intelligence platforms, and scoping down their access to only the columns required for analysis.

Nirav Patel and the Framework Team

With all of the identity verification laws in the pipeline, data breaches, and government overreach (mandated monitoring in new cars in the US), what steps can the average person take to secure their anonymity and data and device privacy?

I’m a tech-savvy person but nowhere near the level of a great many. It seems like in the face of overwhelming odds, making small changes is only a drop in the bucket. I have all the data encryption settings enabled on my phone, but I use services like Dropbox and rely on it heavily. I’ve always thought that if the product is free, you’re the product…but I pay for Dropbox, so they shouldn’t use my data for training AI (but they likely are). Setting up a personal cloud seems like a daunting task, as is getting involved in any of the small projects that people have going (decentralized networks, mesh…things, P2P, etc). I’ve focused more on securing my home networks recently so my Ubiquiti devices are restricted in what they can access, but I haven’t actually pen-tested my network yet. I have PopOS! installed on my home desktop because I got tired of Windows’ invasive…everything, but ultimately I don’t know what I’m doing.

There’s probably a great many people out there that feel like it’s hopeless to try to do anything because it won’t matter as there’s such a heavy push to invade, restrict, and monetize our digital lives. What can the average person do to take control of our devices and data?

I figure the title is good enough, but, I just want to upload/make a spreadsheet in an .ods format so others can view it. Not edit it, not have to sign in to view, but still has sorting options or whatnot. And in the .ods format.

I'm seeing a few options online, but it seems more that they offer viewing but not sorting (which is a huge aspect of spreadsheets), or no importing, or doesn't support .ods.

So I can keep searching and I'm sure something is out there, but does anyone already use a site for these requests?

If you have a flash drive, SSD drive (including NVMe drives), (micro)SD card, or some other popular flash memory media die on you, you might be able to get a free replacement, depending on the manufacturer and the product.

I recently RMA'd a SanDisk microsd card that died unexpectedly. When I looked up their warranty, SanDisk has a lifetime warranty on most of their flash memory products. They even provided a return shipping label. Since they no longer make the card that died, they're sending an upgraded, currently available model.

I've also RMA'd two Kingston NVMe drives. Both of them were getting a bit old, but the RMA was accepted, and in these instances I also received the newer version of the product. I did have to pay for return shipping myself, but it was well worth it.

So if you're about to toss that broken flash media in the trash, double check to see if a warranty applies. It's worth the time and potential shipping cost/hassles in many cases.

Finally embarking on a side-project that I will be doing with Django.

One thing that I am having to consider is how to do encryption.

Looking at the explanations of different levels of encryption here, I think data at rest is really all I need to do (although, I will probably use cloudflare tunnels which will also ensure data in transit but I just won't be implementing it myself is all).

Now, doing data at rest, doing some research, django-cryptography comes up a lot but that hasn't been updated in forever, to point where an open issue on its repo points to a new library (django-cryptograph-5) that was made specifically cause the devs of django-cryptography seem to have abandoned it, but that same thing could happen to the new off-shoot.

I can't tell if this means that I am looking on the wrong webpages for knowledge of how to do about this or when working in the python open-source ecosystem, there's no list of trustworthy reliable publishers of a library for data at rest encryption? like how Django REST Framework is so established, they even have sponsors now.

EDIT: As one user pointed out, this is not about Apple Music the streaming platform, this is about basically itunes but itunes no longer technically exists as an application.

So a little background: my father just died and a big part of his life was listening to music, for most of his life he's been building themed compilations of songs he liked using whatever medium was available, magnetic reel tapes in the '60s and '70s, then cassette tapes, then CDs, and of course playlists for the last 20 or so years. Now my mother and I would like to back up and save a lot of that work as those compilations have a lot of sentimental value and are pretty unique. There's lots of old obscure rhythm and blues and soul songs that you aren't really going to come across anywhere else. However, it's pretty much all locked into Apple Music, which isn't really a problem in the here and now, because we all have tended to use macs since my mother adopted them in the '80s or '90s. However, we don't really want that data just locked into a private ecosystem that has been getting more and more restricted and where we have less and less control.

So I'm looking for a way to keep those playlists intact and export them out of Apple Music in a playable format and into a less locked in system to then back them up. Most of the music should be DRM free as a lot of it would have been taken off of CDs probably as MP3 files, though a lot of that would've happened 15+ years ago.

Does anyone have any ideas about the best way to do that? I seem to be able to manually export each one into a .txt file but of course it's not really playable sound files. My tech skills are pretty limited, I have about an average amount of knowledge or even slightly more for someone my age (30s) who grew up around computers and the internet but I grew up after it necessary to have basic coding skills to use computers so my experience doing even basic coding or running scripts is pretty much nil. Any ideas would be appreciated.

Edit: it’s version 1.0.6.10

Hey Tilderinos.
I've been looking into buying several flash drives since my largest flash drive is a 32GB sandisk, and I use or interact with all the 3 major OSes, I use Linux on my desktop and on a secondary laptop, I use MacOS on a Macbook and everyone else I know uses Windows(So I'll need an exFAT drive for them).
My recent experience with flash drives though makes me more willing to trust my data to a system's RAM than to a flash drive. At least RAM wouldn't lure me into a false sense of security then spontaneously fail, I know that my data isn't going to last a reboot.
I've got 3 sandisk cruzer blades fail on me, once was an error on my part where I accidentally hit it with my knee while plugged into a device(device unharmed, the drive is dead), one time I upgraded the SSD on my SteamDeck and flashed the steamdeck recovery to an 8GB stick, it worked fine while restoring and it still can be read... it's stuck on read only and, Gparted, Windows formatter, Rufus, Mac's disk utility nor mkfs can make it reusable, I assume it entered read only because it tripped some "whoops I'm dying" thing like some SSDs have(from what I know). The last one is effectively a resistor that connects to a USB port, it heats up, SOMETIMES appears on PC, Linux can open it, copying things into it via Nautilus works albeit very slowly, then when I try to open the root of the flash drive it is stuck perpetually trying to load, when I unplug it and plug it back in again, I can see the folders but entering any of them immediately goes into the permanent loading state, mkdir, cd and ls can work on the drive... intermittently, but I'm treating it as dead.

This leaves me with only 2 other drives, my largest drive, is a 32GB Sandisk Ultra, and my smallest drive which has been more reliable than the Cruzer Blades is a 4GB Sony... USM4GP thing, which I have no idea what year it was from and a quick googling didn't bring up any release date, but it had faster read/write than the cruzer blades, and it's been my main drive for things like installing an OS/burning an image into it yet it lasted all these years.

I'm trying to get a USB-C drive specifically since all my laptops that are in use and my PC have a USB-C port, but all I see in local big retailers are Sandisk, Sandisk and more Sandisk, Amazon however has some that aren't Sandisk.

Does anyone know a USB-C flash drive that is genuinely reliable? Was it specifically Cruzer Blades that is garbage? I've not had a Sandisk SD card fail on me yet, should I just avoid Sandisk for anything but SD cards? Should I just say fuck it and buy a bunch of enclosures and NVMe drives?

I've read that flash drives get bottom of the barrel NAND chips that can't be used on SSDs, too. I know that flash drives aren't meant for long term storage/backup but a drive that old shouldn't be still going on that strongly against new ones.

I've been looking at PNY Elite V3 with USB-C as a connector that I've seen a few listings on Amazon but it's 1TB price is almost the same price as a 1TB NVMe SSD(Though not factoring in the enclosure).

I wanted some help with a homelab server I am in the beginning stages of designing. I am looking for a flexible and scalable media and cloud system for home use, and I thought this community would be a good place to source feedback and recommendations before taking any real next steps! I really want to check that I am approaching the architecture correctly and not making any bad assumptions. I am open to all feedback, so please let me know what you think!
I already run a simple home server and I have typical homelab FOSS apps, such as jellyfin, navidrome and audiobookshelf, but I am also interested in migrating away from cloud storage using nextcloud, immich, etc. In an ideal world, this setup would also allow me to leave windows on my main machine and use a windows vm for business related work that can’t be done on Linux. I will likely be the one primarily using the services, however I could expect up to 10 - 20 users eventually.

High level setup is with two machines:

• Proxmox Server
• TrueNAS Scale server
  • JBOD with either 90 bay or 45 bay storage
• 10G switch

This might be a stupid setup right off the bat, which is why I wanted to discuss it with you all! I have read a ton about using TrueNAS as a WM within Proxmox, but I just like the idea of different machines handling different tasks. The idea here would be to set up the TrueNAS server so it can be optimized for managing the storage pool to allow for easy growth. While the Proxmox server can handle all the VMs and connecting users, with higher IO, etc.

TrueNAS System Specs:

• AMD ryzen CPU and motherboard
• 64 or 128GB ram
• Mirror 500GB M.2 NVMe OS Drives
• GPU if necessary, but hopefully not needed
• Dual 10gb pcie card if the motherboard doesnt already come with them
• An hba for the JBOD something like the LSI SAS 9305-16e
• SLOG and L2ARC as necessary?

JBOD enclosure

• While I am interested in a 90-bay enclosure, I would only realistically be starting with two vdevs which is why I think a 45 bay enclosure wouldn’t be an issue.
• Im tentatively planning for an 11 wide Raidz2 vdev configuration. This would hopefully scale to 8 vdevs with 2 hot spares or 4 vdevs with 1 hot spare.
• All drives would be HDDs

Proxmox Server Specs:

I am less familiar with the specs I will need for a good Proxmox server, but here is what I am thinking.

• AMD epyc and motherboard if I can get my hands on a less expensive one. Otherwise I was thinking a higher end AMD ryzen cpu
• 128 or 256GB ram
• Mirror 500GB M.2 NVMe OS Drives
• Somewhere between 2 and 8 TBs of SSD storage. Depending on the number of drives, I think this would be a single drive, mirror or raidz1.
  • This storage will be used for all the vm configuration and storage, except for something like Nextcloud where the main storage will go onto the TrueNAS mount.
  • I would also use this for temporal storage such as downloading a file before transferring it to the TrueNAS mount.
• A dedicated GPU primarily for transcoding media streams, but also for testing and experimenting with different AI models.
• Dual 10gb pcie card

Questions:

• I know Proxmox can do zfs right out of the box so I know I don’t need the TrueNAS server, but splitting it this way just seems more flexible. Is this a realistic setup or would it just be better to let Proxmox do everything?
  • Does anyone have experience creating NFS shares in TrueNAS for mounting in Proxmox? I would be interested in thoughts on performance, and stability among any other insights.
• Do any of the system specs I listed seem out of line? Where and how do you think things should be scaled up or down?
• If I ever did expand to a second JBOD shelf, assuming the first one was full first, is it be possible to create new vdevs that spanned across the shelfs without losing data?
• Is SLOG and/or L2ARC necessary for this setup? What capacity and configuration would be best?
• What else have I missed?

Lastly, a quick blurb:

I have been building PCs for a while and undertook building a home server a few years ago. I loved the experience of learning Linux (the server is running Ubuntu), picking up docker, and learning more about the FOSS community has been a joy! Part of this project is to learn along the way but also have a setup that I can build towards over time! Proxmox, TrueNAS and zfs would all be new to me so I really see it as an opportunity to explore. I want a solid media and cloud server setup, while also giving myself the freedom to explore new operating systems and general hypervisor functionality.

Hi all,

I've got (probably) a few thousand family photographs that I plan on scanning/digitizing. These photographs are organized into dozens or hundreds of envelopes with month/year and sometimes event description written on them. I'm on the fence between using a service to do it or DIYing it with a scanning machine.

The way I see it is -

Service pros:

1. I don't have to do it myself

Service cons:

1. I may have no control over how the digitized photos are tagged or organized (date tagged, filename)
2. Risk of photographs being lost/damaged
3. $$$$

DIY pros:

1. I can tag and organize the photos exactly how I want
2. Much less expensive

DIY cons:

1. I have little spare time and this project could be extremely time consuming.

I would love to hear if anyone here has experience doing this and what techniques or pitfalls you may have discovered along the way.