LINUX Unplugged - 690: The S in PHP is for Security

Episode Date: October 25, 2026

A major PHP flaw puts servers everywhere at risk; so we hack ours. Meanwhile, open source helps debloat our smart TVs.Sponsored By:Managed Nebula: Meet Managed Nebula from Defined Networking. A decentralized VPN built on the open-source Nebula platform that we love.Support LINUX UnpluggedLinks:Web Boost — Send us a boost via sats or USDJupiter Uplink💥 Gets Sats Quick and Easy with Strike📻 LINUX Unplugged on Fountain.FMConnecTen Internet: promo Jupiter35MP3: Clanker Therapy 3: What Have You Been Building?YouTube: Clanker Therapy 3: What Have You Been Building?Bootleg: Clanker Therapy 3: What Have You Been Building? | Members StreamPHP Security Release for PHP2ShellPHP2Shell: PHP Remote Code ExecutionUnderstanding PHP2ShellCVE-2026-109618 - PHP RCE via OOM corruptionCVE-2026-109619 - PHP RCE via stale global stateTailscale SSH Flaws Could Let Hackers Gain Root Access Across ServersPHP: OOM corruption advisoryPHP: stale global state advisoryPHP's October 23 follow-upSteal My Bitcoin - a PHP RCE challenge! — Made this because I'm curious if anyone out there has figured out how to actually use this PHP RCE we spent the last few days panicking over. Have fun!+ https://news.ycombinator.com/item?id=50224916People are using AI to make their smart TVs dumb againCleanYourTV — Debloat any Android or Google TV over Wi-Fi and get an Apple TV-style home.CleanYour.TV: remove ads and bloat from Android TV and Google TVcleanyourtv/addons/frigate-glancecleanyourtv/addons/smart-homecleanyourtv/addons/tv-hubhumblemuzzu/dumbtv — Take the ads, tracking and clutter out of your Fire TV over ADB, no root. Every step can be undone. Comes with its own open-source home screen.Amazon.com: Xiaomi TV Box S 3rd GenThe LLM-gen-AI Elephant in Our FOSS Room :: SeaGL 2026 :: pretalxKSMBD: Critical Unpatched Linux Kernel Flaws Accidentally Disclosed on Public Listandroid-nixpkgs: Nix-packaged Android SDKLCARS - Wikipediaagent-shell - Emacs Agent Shell — Brings your favorite AI agents to Emacs, keeping you at home.HouseWaves — Home Assistant Whole-Home Multi-Room SpeakersLeadStingerNiri — A scrollable-tiling Wayland compositor.Umbriel — Umbriel is a Wayland compositor designed for daily use, with scrolling, dwindle, master, and floating layouts, per-output workspaces, window rules, blur, shadows, and fluid animations.NetBird - Open Source Zero Trust Networkingnoblepayne/meshSidecar: Mesh network sidecars for NixOS ServicesVero V - OSMC — Vero V is OSMC’s fifth flagship streaming media player that’s designed for fast, “future-proof” 4K playback, including AV-1 and HDR formats. It uses an AMLogic S905X4 processor with 4GB RAM and 32GB eMMC storage, and it connects with HDMI 2.1, gigabit Ethernet, and Wi‑Fi.HelixNotes - GitLab — A local, open-source Markdown note-taking app. No cloud, no account, no telemetry.Pick: Telescope — Use your phone's camera as a webcam on Linux or Windows, telephoto and wide lenses included.Telescope features.md - Telescope DocsTelescope: your phone as a webcam on Linux & WindowsPick: plex2jellyfin — Migrate your Plex library to Jellyfin and keep it clean forever. Mass rename, dedupe, consolidate, then a daemon guards new downloads.

This episode of Linux Unplugged is brought to you by NameChief. Many people know NameChape for domain names, but there's a massive hosting and digital services side to what they offer, and that is particularly interesting if you run your own home lab. There's always another project, right? And sometimes it makes sense to run things beyond your home network. You might want remote access to your media, off-site backups, or AI agents running 24-7.

A VPS makes that possible. Use it to tunnel or reverse proxy for Jellyfin, say for off-site backups, or a focus server for your agents. NameChip VPS gives you full root access and a choice of supported Linux distributions so you can do what you need. Pair it with a domain and you can give access to each service

so has its own easy-to-remember address instead of standard IPs. So if you're thinking this actually seems pretty smart, go to namechip.prom and use code unplugged for an extra 15% off VPS hosting. It's not just names that are great value. Namecheep.com. and use Unplugged. Hello, friends, and welcome back to your weekly Linux talk show.

My name is Chris. My name is Wes. And my name is Brent. Hello, gentlemen. Coming up on the show, today, a major PhP security flaw has server admin scrambling, so we did the right thing, and we hacked our own Next Cloud instance to learn everything we could about the exploit, and we'll share it with you. Plus, Linux users are finally fighting back against TV bloat.

there are some open source projects out there that will help clean up your Android TV or your WebOS or Samsung television and finally take it back and give the right to repair an injection right into your veins. You are going to love this. You have to catch this. Game changer. We'll round it out

with some great boosts, picks, and a lot more. So before we get to all of that stuff, we've got to say time-appropriate greetings to that virtual log. Hello, Mubbley! Hey, Chris, good morning. Hello, hello. And hello, but there. everybody in the quiet listening.

Thank you for joining us. Making it a Tuesday on a Sunday. We appreciate you. And good morning to our friends over at Defined Network. And go to Defined.net slash unplugged. I was going to say Nebula, but it's Defined.net slash unplugged.

Built on the open source VPN Nebula. We love it and boy, do I appreciate it more than ever. Because with Nebula, you own the entire stack, including your own lighthouse servers, the links, all of it. It's fundamentally protected by encryption. There's no third party control pain. No third-party exploit that's going to pop their systems that makes your system vulnerable.

So, like, I have direct system to system VPNs. There's nobody else that can touch that. That kind of ownership and security, especially as we're going into this era of services and companies getting attacked more and more is massive. But I understand it can be a lot to chew. It can be a big bite. You can get start with managed nebula. They'll help you.

They'll spin some of it up. And you could always migrate to your own self-hosted system if you want. There's a lot of optionality. And the beautiful thing is they'll get you start. 100 hosts absolutely free, see how it works for you. It's a great alternative. And the battery life, the CPU usage, and the network overhead significantly less with Nebula. And that adds up even on high-end boxes, but especially on lower-end systems.

You're going to be impressed. Try it out. Defined.net slash unplugged. Get 100 host totally free. No credit card required. And support the show at defined. Dotnet slash unplugged. Well, here we are.

I think we're going to be probably going through this. a bit more over the next year or two. But this is the week the internet really froke out, freaked out. I guess that's, if you spell with a P, froked out about a Ph.P flaw that brought a lot of services that I use, probably a lot of websites that you guys use down for a day or two as they scrambled to solve some of this. Yeah, you really kind of saw different. It gives you a little bit an impure window into some of the operational posture of some of the things you can use.

I was surprised by some that took longer than I expected and some that did it very quick. I knew something was up when I got a notification from Linneau that they were just rolling with a reboot and just nothing you can do about it. We have to do this. Like they only do that one. It's a critical one.

So it was two vulnerabilities, both rated a CVSSV49.2. I guess that's pretty dang high. A nine is pretty dang high. When you see that, it sort of sets off alarm bells. And of course, there's a lot of websites like WordPress and others that have been using PHP for a very, very long time.

And these are unauthenticated attacks and the remote attacks, so it's pretty much as bad as it gets. Yeah, and you've got, you know, you can link serious data out of the session in kind of both of these. So that's not good, so things like API keys can link. And in one of them in particular,

depending on the configuration of the box, you might be able to get a shell. Yeah. Yes, you might. It's kind of, you know, It was also a bit of a mess in terms of disclosure, various leaks, right? Like some of the CV-E IDs, a wrong 10.0 score came out, a proof-of-concept video that went up and then got pulled. They had to move the day forward to try and deal with it, right?

So builds weren't really ready, which just added kind of to the scramble versus, you know, there would have been a lot of folks that hadn't updated, but basically no one had a chance to. So my understanding, I mean, I'm just kind of trying to bottom line this, is one of the more nasty ones is an out-of-memory issue. And it can even be triggered by like the, like, the Ph.P loading bar if you attack that in a specific way. Uh-huh. Yeah, like the upload progress support. Right.

So, a lot of websites use that type of stuff, and that's been around for a decade. You know, that just makes me think this vulnerability has been sitting around. Yeah, and that's where you get to the questions of, like, what does it take to actually be impacted, right? because it does depend a bit on the, what can happen depends on your exact setup. Are you using the default config, which unfortunately does seem to be pretty darn vulnerable? You may not be. And so in your particular stuff, various knobs you need to go check out. And it matters if you're using Apache's mod PHP or using FPM.

All right. So before we get into how we protected our own Next Cloud systems and how we poked at them, there must be some interesting technical details that you want to make sure we dig into in any one of these. Anything that stands out to you that's worth commenting on? Yeah, so it is kind of in, in particular, like the RCE one is in the VM itself and it has to do with allocations, right? And so, like, you can be allocating and then run into out-of-memory handling code and then things don't get cleaned up properly. Basically, PHP has a problem it needs to solve, right? The VM that runs your requests. And PHP in particular is a, you know, a very differently designed

language. It's like hosted by this other runtime, like in this case, Apache with mod PHP. And then it's like really based around request and response almost entirely, right? So everything kind of runs on the request. So the VM basically needs to run untrusted request code inside long-lived processes cheaply without kind of letting things interrupt each other with the right security guarantees. They want a hard memory cap on each request so that that can't get out of control. And you want to be able to abort a runaway request without killing something that's serving a different site. That sounds like quite a recipe for a bad thing to happen.

Yeah, well, and you're implementing it in C, right? So you need to manage memory. They use something called an arena. Request memory comes out of a per-request pool, and at the end of the request, the whole arena is bulk-freeed, instead of having to walk different, like walk through all of the objects

that you allocated and free each node. The problem comes in when you have to have code that handles allocation failing, right? Because when you are allocating, memory, it doesn't always work. So you need to have some model of failure. And this is where things like Rust can take advantage of the compiler support, and you can do, basically treat errors as values, and then you can have the compiler enforced that you always handle the case that it fails. In C, they don't do that at all. I mean, you could, but you have to do it totally

manually, and you have to check every allocation site. Otherwise, you're vulnerable to something like this. So instead, they use a long jump, which is basically a go-to. And so they kind of have to, of a pattern where if anything goes wrong, it jumps to a dedicated sort of cleanup code, and that's where things sort of fall apart. And they're storing a bunch of stuff in global state that sort of

should be request scoped. But it's kind of tricky because sometimes there is stuff that needs to outlive the request, but you've got to be really careful about how you handle that. And that's where it's kind of interesting because, like, Rust would probably, if you did it in Rust the right way, it would probably mean, and

the default way, that you could still have logic errors. It won't solve everything. And parts of this, like, you might get given invalid data or stale data or, like, have a correctness problem, but you wouldn't get root, right? You wouldn't get a shell. Because that is a particular property of how they're doing this with C and with the lack of checks of C and the raw memory management of C. And it's, this whole week has kind of been that story. Yeah, what do you mean by that? Well, it wasn't just PHP that we saw, right? Right. I actually had a whole list. I didn't bring it with me, but there's a whole list.

Yeah, so another one was the Brotley stuff, right? And so that's like a compression library that gets bundled into a whole bunch of things, including Node and like all the browsers use it. The Python story is a little more complicated because it's not necessarily the fault, although it does get automatically used if it's available and installed on your system. So it's a little tricky to find out. I think like the default Fast API stack in particular wasn't vulnerable. So it depends a lot on the specifics versus Node. They just ship it. And so you had to update Node because it was basically. baked in. Yeah. But we also saw some EngineX issues. Yep. And we saw a bunch of issues in your favorite, KSMBD. Oh, that's right. That was, yes.

Yes, of course, the colonel's built-in Samba server. Who would have thought? So in this sort of rising tide of vulnerabilities, it's not that we will only see these issues, right? Because you can have just errors in every type of program. But it's really going to show us the long tail of C code that is out there that we rely on, that these were always there. And a lot of them are not like some crazy bugs that humans could never find.

They're bugs that humans could find. We've just never been able to look. If you stack a bunch of certain edge cases together, you could find them. And in this case, this code was flagged two years ago. Oh, that is an interesting bit of this, yes. But they didn't really have a way to actually demonstrate that it was possible to do this. It was a theory. And so it's actually, as pointed out in a great talk at Siegel just recently,

AI is on both sides. of this and the fact that it raised the floor so that you could make that economical to figure out, right? Which has happened. Yep. But it was also, it can also be involved in like crafting the fix because it's a lot to fix that you need to move fast and as many eyes as you can have on it the better. Because we've seen with some like including with KSMPD, the researcher found some himself. It's also very interesting because he's using, kept pretty good numbers on like the number of sessions found and how often they found things. Yeah, so it's worth checking out. but they kind of were each fixing each other because this code is genuinely tricky, especially with like race conditions or ordering guarantees in KSMBD in particular. So he found a vulnerability himself

and then proposed a patch, and then the AI found a significant flaw in the patch that would have done almost a similar vulnerability. And so, and then a bunch of the AI patches didn't work either, right? So it's like, it is just, especially in C, you just don't have a lot of structural guarantees to help you at all.

and then you get screwed. But it is worth seeing like not all of those would have been prevented by rush because some of them are genuine sort of like protocol errors or something that isn't really modeled in the type system. But a whole bunch of the worst consequences, interesting, just wouldn't be possible. I have a big question that I don't think necessarily we have an answer to that we should be thinking about. Are we getting to the point where humans aren't like, we're not quite capable of keeping all information present that allows us to write good code. Are we getting to that point?

Wes, you're far more qualified to answer to this than I am. Also, to back up Brent's point, it's not like they used some super crazy model for some of this. They used GPT-5.6 Saul, which has been out for a minute now. This is not like some sort of exclusive, powerful model access that cracked this. This is actually kind of like a last generation model. Well, and like right, it's in code that humans had also flagged as being suspicious. This is why Brent, I say, I think we're going to have a couple of years of this.

You know, I came on after the cold card exploit and I said they'll come for Bitcoin first because they get the money right away if you crack a Bitcoin wallet. But then after that low-hanging fruit and they've started to harden their defenses, you have to go after infrastructure for these guys. You have to. And it's going to be all the types of pHPs around the world that they go after. And to Wes's point, it's on both sides. We used AI-assisted tooling to protect our own systems, and I used it to exploit my own Next Cloud server just to understand more about how this works. So I'm using, you know, on that side as well. There are some mitigations.

There are some steps people can take. Yeah. And not every config is vulnerable. In fact, my config actually held up pretty well. Yeah, as did our J.B. production NextCloud. thankfully. But yeah, there are mitigations you should check out, including stopping the upload progress

setting, which is on by default. But you go check out. We'll have links in the show, and it's surely you've already patched by now. Yeah, yeah. It was interesting to check out the huge variety of configurations that may or may not work, because there are some that really won't, especially if you're trying to get

all the way to shell versus just maybe like an information leak. And that's again where like the FPM setup has better cleanup of workers that died during memory allocation failure. And so it was not vulnerable to the worst class of these. It was easier to mitigate. So when I decided to try this against my own system, that saved me a lot using FPM. I was able, though, to exploit the upload progress processing thing and produce a memory

exhaustion air. And it didn't go all the way. and do like a full pop from there, but I was able to get that far to reproduce that memory exhaustion bug with the upload box. And thankfully, since my personal next cloud server isn't on the public internet

and does use FPM and all that, like it really actually, the overall impact wasn't horrible for me. I was able to just basically use one of the exploits out of the two. Maybe if I chained it with a couple other stuff and kept going. In fact, the bot had a suggestion for ways we could probably,

keep going and get more access, but I really wanted to just focus on this right now. Yeah, I was able to get a lab going where I was able to get a shell, which was kind of fun. You were, huh? Yeah, like kind of regular production, I-N-I, not some special lab version. Single worker, ASLR on, and I audited a few different POCs that were out there.

Because it was kind of tricky. Some didn't seem to work in my environment. Also, if you ever do that, be very careful. Some of them might have dangerous code in there. Yeah, so to be clear, I basically stood up a lab copy of my production NextCloud system and attacked that. Yeah, mine was more of an artificial test, but I was because I wanted control over a lot of the variables. But it was fun. I mean, I got a real shell running as the user in the container and deleted some files off that. That's dangerous.

That's horrible. Which model did you use to get that far? Because I think some of them are not willing to go that far. Might have been deep seek. Old deepie. And if the situation is moving pretty quick, the Friday before we recorded October 23rd, PHP had another post, another breaking update.

They identified an additional unusual vector. This is CVE 2026-11-5560. It does require configuration using PHP underscore binary or PHP serialize, followed by an application switching to PHP at runtime before session start with upload progress still enabled. So you need all of those conditions, but it's out there. It's like a configuration that, exists.

So, well, and to your point, like, they fixed these, but they did not rework how allocation works across the entire code. So there's going to be more. Yeah. There's just a lot of different cases. It's almost structurally guaranteed. Yeah. Wow.

That's the thing. That's the thing. And we could just never, humans audited parts of it and found lots of good bugs, but we've just never had, it's like a change of the economy of what it costs to be able to scan for these note and patterns. Wow. And we depend on a whole lot of C code, right? That's where it's like Node in Python, you don't really thinking about C necessarily, right?

But they all link into a bunch of C libraries or directly have them embedded. It's a real thing. The flip side, right, is it's never been easier for us to come up with patches faster and deploy them faster. Yeah. I mean, it sucks that that's necessary in some way. You kind of have to embrace it. This is going to be a year or two of scrambling. And the software will be net better.

result. It seems like not everyone is interested in going through the regular disclosure process either. There's, what was the number? Was it potentially 11 CVEs around tail scale, I think, that we're floating around? I don't know how many of them are serious. Just some of them perhaps not

responsibly disclosed as we go on the air. So I don't have details about it yet. But like, that kind of stuff is going to happen a lot. And I do not like that. Yeah, I mean, as the cost goes down, more people look. And that means more people will find and perhaps find at the same time. There's only, you know, especially if there's known places to look that you go digging for.

And it's never been easier to, like, backwards figure out from patches being applied to projects that may or may not be announced yet or labeled as security things, right? That happens a lot. And then, like, later you realize, oh, we patched it in that early release. We just didn't quite reveal the impact. Yes, I've noticed that a lot, actually. And the bots can often reverse engineer or figure out those are all candidates to look at. Having out the Liquid Network. And then so that means it's not just the best of the security experts who are able to find these experts or have paid.

time to do it is really a lot of it as well, right? It can be a whole lot wider of people who may not have really been trained or taught or convinced that this process is what they should do. Are you saying open source is bad because these things are out in the open for people to kind of... There may be an initial tax, I think, is the way to look at it, perhaps. What do you think of that way? So it's like an initial exposure tax, but then the hardening process that happens will be much more rapid than a lot of the commercial stuff. They'll just wait for it to happen to them. Yeah, it's not that I think on the both sides part.

Because people will also be, like, on the proprietary side, it's not that they're not going to get hacked. They just get hacked in different ways. Right? They get output tested. They get your flaws found in them. And you don't have, only the people with the code there get to decide the rate of scanning. We don't get to decide the rate of scanning, which sucks,

but we get a high rate of scanning as a result. Yeah. Not all open source, but the big ones. The fascinating microcosm of this has been the Bitcoin ecosystem as they have been since the cold card attack it has been something every day

you linked in the show notes the steal my bitcoin.com steal my bitcoin found that oh okay made this the author writes made this because I'm curious if anyone out there has figured out how to actually use this RCE that's a great fine brand yeah I've been seeing a few

while reading about this like people who are skeptical that this is actually as serious as it is and I thought this website really you know, puts their Bitcoin where their mouth is, I guess. And so steal mybitcoin.com.

The author just says, I made this because I'm curious if anyone out there has figured out how to actually use this thing. Have fun. And it's about, what, $2,000 US dollars worth of Bitcoin. And I don't know how we're going to find out

when this gets cracked, but somebody will probably just watch the blockchain. Yeah, fair enough. But it's an interesting, it's interesting to see these kind of things show up. because it's like an invitation to prove that it is reasonable in the wild.

I know you guys did your own tests to hit your own infrastructure or some lab results, but this is like, have adder. And I think that's just lovely to watch. I do like that. I wonder if it, you know, kind of building on what West said, what we learned about this week is the first understanding of this. But then what we're going to learn is all of the extra edge cases that break this. and they'll just be more and more of them

and they'll be used as exploits. And so if it seems like if somebody's going to come for this Bitcoin, I think this Bitcoin might get claimed eventually. Well, it is. If guys like us have been popping our own next cloud servers, I don't know, man. Well, and it combines in a really nice way

what you were saying earlier. Like, Bitcoin's going to get hit first and then it's infrastructure. Well, this is both. It is easier in many ways to have your own infrastructure and actually maintain it, but the flip side is you really do need to maintain it.

Yeah, this really is, it's more of a C problem. It's definitely a PHP problem, but it's going to be a C problem is what it's going to be. And there will be other things, right? Like there will be plenty of issues found in all types of software. You can have bugs, security issues in Rust. It's just, C has this worst class of it,

and the consequences can be pretty dire. Thanks, Wes. Well, recently, we've all heard, complaining about his Google TV, especially members. And that gets me thinking about right to repair and all these things and maybe Chris making it into your own. But we saw some progress there this week, didn't we? Oh, boy. I am pumped up about this.

So just like Manna from Heaven, a solution went viral on X about a week ago where this guy was like, hey, I used a clanker to de-blanker. to de-bloat my TV. And from there, we have now seen multiple open-source projects spin off to do this for you, to take out the spyware of your WebOS television or your Samsung television. Also interesting, aside, new levels of spying on some of the Samsung televisions

were discovered in the process of creating these tools. It's delightful. Including always listening microphones. So there are two projects that we want to talk about this week. One is Clean Your TV, and the other is dumb TV. And clean your TV promises to strip the blotware from any Android TV or Google TV over Wi-Fi

and replace it with a launcher that more resembles you might say the Apple TV. Which I would agree as somebody who owns an Apple TV. Yeah, clean, simple, just the apps. Just what you want, nothing more, not a bunch of advertisements. It's interesting, as I was working on this, I had this up in my office,

and just the craziest grotesque advertisements going by. I really couldn't believe it because it's Halloween, so they're doing like crazy, bloody gross stuff. Oh, didn't you want Gore on your TV? No. No. Just sort of in the idle background all day? Yeah, two weeks before Halloween on a random Friday or Saturday.

No, I don't. You're a party pooper. So it's pretty wild because, you know, this really kicked off. I'd say, oh, I don't know, October 17th. And from there, this has just been an absolute explosion in open source development that lets you point these tools. at a Samsung, at a webOS, at an Android TV, at a Google TV, and clean them up and take control of them.

And it's taking advantage of you have to put it in developer mode, and then you go in and you turn on wireless ADB, and you pair those up. I think maybe you could do it over USB, but this is how I did it. Yeah, same. And I used clean TV. Yeah, same.

Mine ended up being based off that. And I was deep bloating. I've talked about it once before on the show, this Yama TV box that I got. for my daughter recently. And I was shocked how bad the experience was. Buying a modern Google TV box,

third gen 4K, 32 gigs of memory, Dolby Vision, Atmos, Wi-Fi 6, HTML, HDMI, H.D.2.O. I mean, I just thought this thing would be pretty good. I just expected this to be a pretty decent box. It even supports AMD Freesync for God's sake. It's awesome.

And it was a horrible experience. It has been slow. It's been bloated. Loaded with crap. apps I don't want, features I don't want, really kind of dark pattern user interface stuff. And I was really disappointed in what the current state of Google TV was. And I'd mentioned it on the show. And I have to say, after going through this process, I think I'm going to buy another one of these. Is that right?

Yeah. Yeah. It goes to show you, right, because that has way more RAM than my Google TV, because I have like an old, old version that had like two gigs of brand. And yours is better. Yeah. I know. It's so much better now, boy. after going through this process,

the cleaner launcher, some of they have these modules, there's a list of modules. So, for example, there's a frigate glance module. So when frigate detects activity, a little card can show a frigate camera snapshot.

That's great. There's a home assistant module. So you can control certain smart devices from your television, which in this particular case is perfect for my daughter because there's just a couple

of smart devices she needs to control. Now she can do it from her television. And there's other, there's other random ones like, working with headphones, integrating with airplay. There's a lot, there's like, I don't know, 50 of them or something. But the ones that, those are the ones that I just like, oh, these are going to be, I just installed them immediately. Then the other one that I'm going to play around with is, did you see they have TV Hub?

Yes. Which adds kind of an IPTV, M3U, XML TV guide support. I would like to try this. Specifically with dispatcher support. And these is, it's like, it's bringing a lot of the stuff that I have all together now. in an interface that's actually clean, and, I mean, the performance is better. And you have more control, right?

You can just easily put stuff you want on there. Well, like, one of the things I was able to do is, I just on this box could not get tailscale to start at boot. It works fine on my Paisel, but it wouldn't do it on this, Yamai. Well, it works now. It went in there, and it got it so that tail scale now starts automatically at boot, so that way my daughter doesn't have to do that

before she launches jellyfin. It is a very nice bonus to have something that can just, go into an Android system, audit it, change things, find things. Like, it feels a lot more in that interface, like a Linux system. It never really felt that way before. Yeah. And it also removes some of the adware spyware crap that's in there. Like there's a talkback thing where it's tracking.

There was two particular components that are basically like ad tracking spyware, essentially, that it removed for me. Yeah, I had 13 packages to Zaypal. Whoa. Yeah, TV. remote control. Logs remote control activity. Yeah. Partner setup. Vendor onboarding path. Don't think I need that.

Syncadaptors.com. You know, for your calendar sync on your TV that I don't actually use and don't need. Netascope, network measurement and reporting. Something called federated compute. On-device federated learning. Whoa. Something like some crazy program. Some program. They're never really going to do. On-device personalization.com services. Sure. Got to have that. Got to have that. Ad services and EXT. Ad services. Yep. shared service apex models dream X backdrop you could just take some of that was just like I don't need the screen saver from Google on this device right but yeah there was a bunch of stuff to disable yeah yeah yeah and as a result I got 100 megs a ramp back whoa and 66 mags of swap I'm in a tiny box like that that really matters something yeah that's no joke that's impressive yeah maybe that's why my performance is so much better I wonder I didn't really dig into why it's so much I just thought maybe it was the launcher yeah so uh the I ended up building the launcher because then I developed a bit of a little fork. I had to do the same.

The stock launcher is 172 megs. A clean community rebuild from source is 80 megs with the same features. Yeah. Yeah. And I was able to build it with the Nix Android SDK. Yep. No problem, which was great. Yep.

You did something a little different, though, on yours. Yeah, I attempted. It's not finished. I'm not happy with the interface. Sure. But I just wanted to see, like, okay, well, someone was able to develop a new launcher for this. It's beautiful. can I make it look worse?

Can I customize it? What can I do with that, right? If it's just an Android app I can build, then in theory, I can just ship my own view screen onto the TV. Could do. Yeah, and you had recently found... Like an Elkhars dashboard GitHub. Yes.

Someone had developed a way to make really nice dashboards in like an Elkhars in style theme. And to be clear, L-Cars is the style of computer interface on the Star Trek, the Next Generation TV series. for library, computer, and retrieval system, L-Cars. And it's the standard developed by the Akuta's, and it's beautiful. So it immediately screams Star Trek. And so, Wes, you created an El-Cars television interface for yourself. I want it.

Well, okay, so it's pretty janky right now. I'll send some of the development images so you can kind of see what the... It's bulky, but the spirit is there. Like the top information bar is perfect. the top of it. And honestly, even the big tile buttons for the launchers isn't really that bad. It's just kind of the stuff above it.

Yeah, and it's been through rapid and not always fully supervised iteration. Sure, yeah, yeah, yeah, yeah, I know what you mean. But, you know, we was able to ship different fonts up there. It was able to hook itself up with a vision loop so we could help audit, although I need to do more auditing clearly. But it took a little while to get it to actually understand the full Elkhars style and respect it.

You got close though. It was some progress. It was a fun idea to see if I could even customize it at all. I think you should keep pressing on that. Oh, I think I have to, right? Put it up on GitHub so I can take it all. Just so I can take it all. And then all of my televisions, all of my televisions will be L cars.

And then once I do that, I'll have to standardize all of my dashboards and home assistant to El Cars. All of my agents are already Star Trek theme. So then it just all connects. So this is really important that you do this. So that is clean TV, or clean your TV, and it's awesome. It's really growing like crazy, too. There are 303 different television models, 86 different brands, 288 languages supported at the moment.

That's so great. Yeah. Just cooking. When I get back from camping, I am pointing this at my LG television as well and taking care of that business. But I might use something a little different. I haven't really decided yet. The other project I think it's worth mentioning is Dumb TV. There are a lot of these, but Dumb TV is a popular one right now,

kind of a little more focused at the actual television smart televisions, not so much the set-top boxes. But again, another clean launcher. The thing I love about this, too, is for my main TVOS, this is perfect. They just put big, huge, HDMI input selectors right here on the launcher. Because really, that's what I need the main TVOS for is selecting the input. I mean, how many times, like, we're at an Airbnb, and that option is just buried somewhere totally different in each different one.

I don't, that's wild. Also, I think this works on a fire TV stick. So, yeah, yeah, yeah. So if you got a fire TV stick or a cube, you can throw this at it and remove, oh, this would be great for our Airbnb system. Again, what they're doing here is it's ADB. It's all Android ADB. They have a massive list of all the fire sticks that are already supported by that project. It's huge.

I know. Yeah, that's part too. It's worth, A, just auditing these things. they're new and moving fast and, you know, make sure you know what you're doing. But then also, you can customize it, right? Like, you don't have to just run their script, upstream stuff as it is. Do that if you want. But, like, maybe you want some features left on, but you want to turn a bunch off.

There's already for this, um, or versions of this for like BenQ projectors. Yeah. Some Phillips televisions. Some high sense smart TVs. TCL Smart TV Pro G08 is out there. A couple of Yamae TV sticks as well. So it's just Something tells me those lists keep growing.

You know, one thing, one thing I liked a lot about how clean your TV implemented this, or at least how they're presenting it in their docs, is they said, well, you know, if you got a clanker just pointed at this and it'll figure it out. But if you don't feel comfortable doing that, here's exactly what everything does. Here are the scripts. You can look at them yourself. You could run it yourself and like, not a big deal. And I think that's actually quite a reasonable approach.

Yeah, it's nice to have both. Feel empowered to make it work for you. So this, in my opinion, is the absolute essence of right to repair in the AI-assisted world. These boxes have felt consumer hostile to me. They were upsetting and poorly done. Poorly implemented. And it was all just software. They had the hardware capabilities all along.

They just weren't using it in the way that I needed it. and to be able to take something that I purchased that I was so deeply disappointed in and then use these tools to turn it into something that actually works better for me than they could have originally offered because they don't know I want home assistant integration and I want to be able to have a module

to turn on ADB remotely really quickly from the launch screen they're never going to build that but I can't. That's a product for you. That's a product for me and so now the launcher if they have problems I say okay you just hit this button on the launcher it'll turn on ADB remote my clanker will find it and I can take care of it

with one click right or fix the tail scale thing, so it always turns on. For whatever reason, that Yami Bucks just wasn't going to allow it. But now it does. And ripping out that launcher that was riddled with disgusting ads, constantly changing, always stealing my attention, now with something clean and simple that I would say captures the original essence of the simplicity of the Apple TV, but with my customizations, it really feels like I have injected the right to repair directly into my veins, and I cannot be stopped.

I have now gone after my fire TV or my fire tablet, my Amazon piece of crap tablet, and I've reduced a bunch of memory usage on that. I'm going after another, I'm going to go after my shield and my LG television when I go home. I'm going after those. And then when I'm done, I'm probably going to get another one of these Yao May TV boxes because they're $79 on Amazon used. So you can pick it up for under $90 bucks, under $100 and have this thing that's got a bunch of memory and it's got great performance once you hack the crap out of it. And it's, it's, oh, I feel so good, Wes. It's nice to turn them kind of being like lazy and bad

into something that's useful for us instead of the reverse. And it's kind of another example of the rising tide, right, of the AI-finding stuff, and this is not even the particularly good stuff. And a lot of this hardware is like, okay, it's fairly low performance hardware, but it's perfectly fine for this use case. And the only reason a lot of it has become unusable is because of the bloat they've added to it over the years. Like, Chris, your box, you keep trying to give to me that you just mentioned.

has been under your TV just collecting dust because it got to the point where you updated it and it was kind of like super slow and useless. But maybe this just recovers it, right? And this new launcher has just been garbage. When Google introduced this launcher with the build and advertising for streaming services that I don't use and never will sign up for with images that can be anything from sexual to grotesque. That was just a deal. That's when the deal was changed. This is not a product that I would be willing to buy. This line of father, I said.

And then I broke my little ship. It is worth noting probably, right? this will not be just a one and done thing. They could, like, they don't have to allow debugging all these things in theory. They can lock it down on all kinds of things. Well, that's crossed my mind, too. That might be another reason why I buy one sooner than later. Just, well, I'm going to get in while the getting's good.

I do think we're better armed for that now. So, you know, I'm not saying that it'll crushes us totally comes back. It just may, there may be some details. The knock-on effect for this, for me, though, could be huge. I may be done finally. I may be released from the grips of the Apple TV, which has been the only device I've been able to live with. I may finally be freed from the grips of the Apple TV, which has massive knock on effects.

I'm going to have to redo my surround sound system. I'm going to need the audience to tell me, boost it and tell me, what is really the best jellyfin client? Is it just the jellyfin client? Because Infuse just crushes it on the Apple TV. What is the best IPTV client? I would like to know that too,

because I've tried a few, but I don't know if I love it. I want something that supports M3U or, you know, and works with dispatcher. Maybe does multi-stream support. Like on Android, I don't know if I know any of them that do multi-stream. I want to watch Mulm3. multiple streams at once. And then the last thing that I could really use help on is I need a good RTP RTSP IP cam viewer

that can pull it multiple cameras, maybe even do a dashboard. I know there's like a couple out there, like Tiny Cam Pro. None of them are as good as some of the apps on iOS. So if anybody has the, I know there must be out there. So please, please help me. Jellyfin, IPTV, and RTSP camera feed viewer. Like that's the key stuff that every time I go back to iOS or I guess it's TV. as whatever the crap they call it.

It's just, they knock it out of the park on that stuff. But the modifications and control that I now have and the integration with my home automation system and my networking and all of that is, oh, I can't go back. I got to have it. So this is the way forward, as long as I can continue to do this,

so I got to drop the Apple TV habit now. That's how much I like this. And just, what was it? A couple of weeks ago, I was ranting and raving and shaming people for buying this. You were at the total other side of this. I was so pissed at how, how bad this product is and that the marketplace even allows for it.

And now I want to buy another one because I've... Isn't it funny that it also ends up with you buying more of that? Well, it's, it's, that's just, I wonder if many will figure this out. Yeah. Dumbies? Uh-huh. Jeez. I want to buy your hardware.

I don't want this. Ah, it's, you know, the problem is, and then we don't have to spend a lot time on this, but they don't really make a ton of money on the hardware. Yeah. That's the problem. And perhaps that's where the deal changes. But we could make a, we could negotiate that. I think the market would be willing to negotiate a fair price.

for hardware that we have control over. Especially if it just worked, you could, you know, it was supported for a while. Really very much do recommend you do this. You're going to love it. Your family's going to love it. They're going to appreciate it. It makes the TV much less frustrating.

And if you got an LG or a Samsung or one of these Google TV boxes, it's worth taking a crack at. And even if you've never clanked it up before, just I'll leave it with this. You can go get yourself some open code. And they've got some free models on there that will drive this. and it's not like you're doing something that's your taxes or your medical records, you're doing something that thousands of other people are

and that is going after like a web OS box, right? It's not top secret stuff here. And a lot of it, especially just if you're doing ADB stuff, much of it's reversible, you know, it's not a huge, like, am I going to break this device necessarily? I'll say, so you were using the deep seek. I was using minamax m.3.3 flash, which is a total psychopath savage

and it's definitely going to do it for you if you want it. And let us know. If you do this, let us know, how it goes. I'm telling you it's going to be one of your favorite things you do this year in technology. It really is a game changer. It's that great. Check it out. Let us know, boost out jubitobricasting.com. Well, my goodness, we received

some boost this week, and we're going to start with our baller booster and tea. 222,22 sats for a, what do we call this, a big McDuck. Woo! This old duck still got it. Quadruple bypass McDuck.

No, we're not calling it that. Not calling it that. Boostin, if you want us to call us to call it that. I have been listening since the Lunduk days and wanted to thank you all for the value I've gained from Blass and Lupp and also self-hosted. Here's a couple of picks I've found recently. Ooh, very good. Agent dash shell for all the fellow Emax users out there. And get thehousewaves.com, which is Speakers built for Home Assistant.

Oh, we were just talking about this morning on Housewaves. That's a got a cool name. Cheese Bacon, are you listening? Here you go, buddy. Home assistant speaker you've been looking for for ESP Home exclusively. Oh, yes.

Were we not just talking about this this morning? Wow, this is so good. Housewaves. Housewaves one, two, and three. It's got an open music assistant built in. Nice. I'm a big, big, big, big fan of music assistant. Use it quite often.

Hmm, this is really good. I don't see anything about prices, do you? I'm too busy ogling over the speakers because they look well done. Maybe the price doesn't matter, Chris. Maybe it doesn't. It's probably not as expensive as a home price. Oh, I see prices. Okay. Houseways 1, which looks like the smaller version, the original.

Oh, yeah. $79 U.S. dollars. Okay. And then they have a larger Housewaves, too, the next level. 109. And they got a couple other models, too. They got all sorts of stuff here. Yeah, they do.

Different wood shades and stuff. Wow. Okay. You know, this agent shell thing actually looks pretty darn cool. HouseWaves stream is a $40 box that connects home assistant

and music assistant to your existing amplifier if you have like a receiver. That's nice. That's nice. I like this Housewaves Cube, a small inconspicuous three inch single driver speaker

made to go in every room. $29. Target price. So they're not available yet. Target price. That one. Some of them are pre-release. Okay, that's really cool.

Now here's my question. Is there any way to tie all this together with Android TV to use these for surround sound. I think we got to find out. Because the Apple TV can do it. So if we could do it, then these seriously become very worth it.

That's a great one. Thank you, Auntie. I really appreciate that. WhomeverWiz also is a baller this week with 65,536 Satoshi's. I hoard that which you're all kind covered. Whomever Wiz writes, I have been hard at work

on QuipClippers. Lots of new features and UI improvements. What I hope to finish by the end of the week is a full integration with my new soundboard at Leeds Stinger. Ooh, new soundboard, you say. Ooh, I just got really excited. Clipper seems pretty great, too.

Okay, so Leeds is a soundboard for MacOS and Linux, fire sound cues from a grid queue list, and it's gripped everything from the command line. Oh, it's got nice waveforms already. Shut up. Shut up, Wes, shut up. It's got El Cards.

Oh, it's got El Cards. Wes, it's got El Cards. Well, we've had that. We needed to have an L-Cars soundboard for years. Brent, do you see that? That's incredible. I feel like you're just like, this is you, whomever Viz, is actually Chris, and he's making his own... Yeah, this is how he announces it.

Also, boys. Written in Rosed. Wow. And it's Ann, install the first line. Nix. Shut up. Yeah, Nix run. You can just Nix run it.

Also, the non-L-Cars UI looks really good. It does look very nice. So one of the things I very much like from my... soundboard guy over here is you've got the waveforms in the buttons and you've got the play position of that particular clip in the button as well. This, I'm telling you, from somebody who uses a soundboard damn near every day for a decade is looking real good. I like where you're going with this.

Boy, I wonder, I don't see a fade out. I would like to see a fade out, obviously. The other thing to consider would be for guys like us is OSC control. Oh, yeah. Or is it OS. Is it OCS? Anyways. You know, so that way we could use it

with something like bit focus in the stream deck. Yeah, good API access. It does. I know you've got stream deck integration, but I don't use the stream deck directly. Folks in a studio use something often like bit focus or something like that

that then sends to the device and it controls the deck. This is looking so freaking good. Maybe I don't have to build my own soundboard. Wouldn't that be nice? Because I mean, I've been fixing to. I have been fixing to. Good job.

Wow. Keep out the great work, and thanks for letting us know. Elkhars, freaking Elkharm. Can you believe it? Well, Greg, the lawyer boosts in with 22,22 cents. Hey, hey, thanks, Greg. Things out looking up for old MacDuck! I saw Reddit open source banned AI.

How soon before some sect of anti-AI zealots will fork a pre-AI Linux kernel and form an all-human distro made from increasingly divergent versions of Voss software? You know, I had thought about a pre-AI contribution. They better get to it because it's been going and it's building. You think that'll happen? I mean, I can see, I think there will certainly be some forks or communities that choose to continue to maintain things. We should jot this down for a 2027 prediction. How big?

That will be an interesting effect to size to watch, I think, right? Because to really effectively do it, you have to put in the maintain, you know, you got to develop it, you got to maintain it. And that is a non-trivial cost. I think the challenge here is deciding. where to put your fork. Like, which commit do you put your fork on? Because how are you proving which commit has AI and which one doesn't? That's the real challenge.

Yeah, but you don't have to get it right. Perfect, right? It's because it's not like it's a binary harm, I think. I don't take this version, but... This is not a virus, clearly. Yeah. It is funny that the open source subreddit has banned AI. So they've essentially banned Linux kernel.

I mean, there is some... People have pointed that out. The subreddit is actively discussing the issue. You might say. Patient Tech comes in with a row of satchels. One, one, one, one, one. I got that right. Trust me, it's 11,100 and 11 sats.

D-N-S. Put some macaroni and cheese on there, too. Oh, that's good, too. A DNS boost, a cloud flare boost. First boost into the show. Oh, hey, hey, hey. B-O-O-S-T. Nice.

Only thing to say, I am Brent. You are Brent. We are all Brent. In some way, there definitely true. Amen to that. Amen to that. Feed your Brent's. That's true.

And you do need to feed your Brent. Gene Bean boosts in with a row of ducks Keep up the distro reviews We got to vote for distro reviews All right, see, that was a question that came up Are distro reviews getting passe? Are they getting passei?

We wanted feedback. Gene Bean comes in. Thank you, Gene. We sure appreciate it. Appreciate you. Well, Soham is here with 2,000 sets. Linux or something. I need a straw poll

of how many people think the show is live on an actual Tuesday versus an actual Sunday. This is why I have bedtime wine. Yeah, it's confusing. It may explain our live attendance. Yeah, shout out to the people that made it in the Mubble Room. How is that chat room doing? How is that chat room doing?

All right, yeah, well, it's a long story. I don't think we have to explain it today. We've explained it before. We have explained. It was also, I think, explained recently on the launch. And we'll probably explain it again. I think we might. Stay tuned.

Thank you, so. Appreciate you. Opi 1984 is here with 4,081 Situciers. A-A-RON! That's not the right one. But sometimes the random button doesn't deliver. Sometimes it doesn't deliver. Just pump the brakes right there.

It's got to slow down a little bit. I mean, that's why we got to find out. That's why we're hooked. Forgot to top off my wallet and haven't been streaming stats for most of the episode. Makeup Boost. You know what? He's a good guy, isn't he? He's a great guy.

He's a good guy. He's a real good guy. He's a real good guy. Magnolia Mayhem. comes in with 6,666.66. Ooh, spooky. I like you. You're a hot ticket. You know who I haven't heard anything out of in the last few years?

RMS. You know, that's crossed my mind as well. He seems to have truly and kind of, well, he has done a few events, but it's just kind of complicated. It's a complicated relationship. So I think his relationship with the public is a bit complicated these days. And I think, you know, some folks have moved on, communities have kind of moved. down as well. Yeah, the last I heard, he was doing some stuff. The community wasn't really okay with.

Yeah. Well, I think I saw him do some events, but I think, yeah, I think he's sort of pulled back. He doesn't want to be the, he wants free software to have the attention, I'm sure not. It is a sort of controversial statement. But I have thought the same thing, may I am. I have thought the same thing. Well, great. GeekQuest sent in a Fiat boost, $96 U.S. dollars. I hoard that with your kind That ain't two shabs

Thank you, Geekquest I'm a year plus listener catching up on that back catalog heard Greg the lawyer's membership challenge So I just became a member And here's 12 months of back pay For the content I've enjoyed

Geek, thank you so much That is really generous And very much appreciated Thank you, sir And welcome, I hope you enjoyed the bootleg Indeed Rocket Boy 78, 681

and comes in with $75 of Situciers, but not actually Situciers. Their fiat. You get it. When you announced that you weren't coming to Texas Linux Fest, I felt a great disturbance in the forest. As if millions of voices suddenly cried out in terror. Glad you have reconsidered. This is your BBQ fund. Oh, great.

Nice. You can put some more macaroni and cheese out there, too. You got it, buddy. Put some macaroni and cheese on there, too. And, Wes, brace yourself, buddy, because, yes, zip code is a better deal. It's a zip code boost. Yes, zip code is a better deal. Did you bring your map?

Of course. Ha ha! Such a pro! All right, so where is Rocket Boy? How is $75? You got any guesses? It's in the U.S. Oh, 7.8.

Oh, it's in his name. He snuck it in the username. Yes, he did. Where's seven? Is that like more southern or on the west? Well, the message has a clue. All right. Oh.

Well, he's in Texas. In the force. Here we go. He's in Texas, clearly. But how about Round Rock in the Austin Metropolitan Area? Very nice. Hey, Round Rock, do they have a Babes Chicken in Round Rock? I think they do, right?

Don't they have a babes chicken there? I can't remember. It's great. Yeah, Williamson County. Central Time right now over there. It's almost 2 p.m. in the afternoon over there where Rocket Boys at. Thank you, Rock Boy. Thank you for the support.

Thank you for listening. Yes, yes. Darth Daddy, huh? Uh-huh, Darth Daddy 10. Get it right, get it right. I don't recognize that one. I love it. That's great.

Yeah, it comes in with $50. Oh, here we go. Okay. I've switched to dot, dot, dot, Mac and Linux in Ubuntu. Yeah, we've got a Microsoft. Someone saying some nice, not nice things about Microsoft. I don't even get it, but I kind of get the gist, I think. It's quite graphic.

I've switched to Mac and Linux with Ubuntu. Yeah, I guess Brent knows what that means. So there you go. Very well done, sir. Appreciate you. And thank you, Dardt. Yeah, let us know how it goes. Hopefully you stick with it.

Mm-hmm. Parsonic sent in 20 Fiat dollars. This is for episode 689. You boys have been killing it lately, and the episode just proves that. Also, goodos to Clanker streams. Love them. You guys have said it recently. We might be in a new golden age of open source software if we can wrestle it away from those evil corporations.

Amen to that? Thank you for the support. Ready to fire up my local open model. I'll tell you what. Tell you what. Thank you very much. Appreciate you, pro. Anon comes in with $10 of Fiatz.

Just says thanks. Thank you very much. No, no, no, no. I think this says THX. You know that sound that we all love? T.HX. Oh, I'd love to play that. I can't.

They come after you for that. They protect that. It's a very special sound. They really do. But yeah, you might be right. I'll take Ginger Jammer. Ginger Jammer also with 10 Fiat Dadas. Longtime member haven't boosted in a while.

If you like the scrolling window manager, which we talked about in last week's episode, you should definitely check out Neri. Yeah. Neri's good. Yeah. And Umbriel, which I have not checked out. I've started with Hyperland,

but found Neri and eventually Umbriel made much more sense to my mental model of a window manager. Here are a lot of really good things about Neri. It is fun, too, that we have so many options, because there is sort of, you know, it seems that different people like their brains fit with different workflows, and it's wonderful that we just don't all have to conform to one.

Well, we should all just be using them other desktop plasma because you can make anything you want, clearly. Well, it is pretty great. Thank you, Ginger. Appreciate you. Okay, member free boost time. Starting from Brian from Boise. Hey, Brian.

Great interview. My sister runs a small rural library facing a 2028 ADA compliance deadline. SaaS vendors quoted thousands of dollars far beyond their budget. I'm building her an accessible website using FOS and Community Web infrastructure. Awesome. I want to prove free software can make a difference. Brian, that's great. What a great use case.

Yeah, wow. Will you let us know how it ends up? Either way, even if it doesn't end up. Whatever it mean? We'll still want to know. Maybe we can all learn together. But I think it's going to be great. Leaky Canoe sends a free member boost.

So I just unexpectedly heard the I hoard that which your kind covets. Sound clip from its actual original source. You figured it out, huh? And knock me straight out of my TV show and back into my podcast player. I'm now on a quest to figure out where all of your boosts Sounds come from Wish me luck. I'm glad it gave him the Q to boost too. Thank you very much.

Appreciate that. That's good. Thank you, Kenev. Hey, Goose Guy. Report from I'm at All Things Open in Raleigh today. Nice. I found out about Netbird based in Germany. It's a tail-scale alternative written in Go with Cloudflare Tunnel and replacement baked in.

No more needs for two solutions. I'm not sure if you guys consider it, but I'll give it a try myself. Yeah. The network developer has a YouTube channel. as well. Oh yeah. Netbert. Netbert is good stuff. It is. Quite useful. The, uh, remember the, remember, like, a year or two when West made the, uh, Nick sidecar, mesh sidecar? I think Netbert is, you have support in that. Yeah. Yeah, I definitely have it deployed on a few systems. Mm-hmm. Mm-hmm. Mm-hmm. Yeah, I'd probably have more netbert,

other than Nebulae just kind of came at the right time for me and solves the solutions. I like it a lot. I really like... Yes, I also have some nebula. Yeah, yeah. Oh, yeah. I mean, it's kind of all over the place these days. Something Brett and I were talking about is like kind of, consolidating everything down to like one primary nebula network and then like a little side tail scale network with ACLs that can kind of bridge to the nebula network kind of for some people. Anyways, it's a segment idea we have in the future

because it's a thing for us too. Well, and there's a lot of good options out there with different tradeoffs. It's good. We're in a good state these days. Yeah, you have to let us know if you do go deploy Netbird. Let's know how it goes. Yeah. Outboard ACORN, free member boost.

Boost! Yes. Boost! Boost. Yes, J.B. Crew, love the memberful link to Web Boost. Too busy to set up Sats and Boost right now, so putting my support on autopilot, as you say. I became himself host to SRE when it came out six years ago. Wow. Feeling a bit old. Yeah, you're making us feel old.

And upgraded to the all-shows feed a year later. Thank you very much, Bootleg F-TW. Thank you, A-Corn. I love it. We sure appreciate it. We try to make the bootleg worth it, too. Nimoo comes in with a member Boost, and it's a time to have their boost. Booboo, Booboo.

From 686. I know it's not an Android TV box, but I really love my Vero V, which runs OSMC. Good remote, and it's got family approval. You know, if it wasn't for, if it wasn't for this hackability of the Android TV set-top boxes,

I think this might have been a direction I could have seen myself going. I've never even heard of these. Yeah, this looks kind of promising. I was slipping into, you know, kind of a rethink of the whole setup. So I could have seen that. Thankfully, I think I'm actually quite happy with the end result.

We'll see. We'll see if it sticks. Sam Squatch has a free member boost. I wanted to highlight a project I found, which is helping me ditch Obsidian. Oh, ho. I've actually heard of this. It's called Helix Notes. Helix Notes.

It feels very similar to Obsciting, if you like that. It has baked in WebDAV sync, which means I can sync, but also my Hermes agent can access the notes as well. Love it. Hex Notes. A local markdown note-taking app written. in Tarui? How do you say that? How do you say it was? Atari. Thank you. Yeah, which is a framework for

it's sort of an electron alternative in the Rust ecosystem. Because it's 32% rust. Did you say rust? And Spelt, okay. How many times are out of play the horn? Do we not have a Svelt sound? No. That's kind of rude because, you know, that's more of the project set code. What is it? Maybe someone

could suggest. Okay. Okay, very good. I think it's pretty smooth. Thank you everybody who boosted. We do have the 2000 set off. for time, but we do read all of them and save them all in our show doc every single week. And thank you to our members who support us as well. So let's total it all up, boys. We had 11 of you stream Sats, and collectively, 11 of you, pretty good, really, 33,9002 Satoos. Thank you for helping us, help you, help us all.

Well done. When you bring it all together with both the Sats and the Fiat boost, but we're just going to convert the Fiat to Sats of the current value. It sounds simpler. We do it for simplicity, but then you explain it. That sounds complicated. I know. I know. We did well, though.

We did well. It's really nice leading in to Texas. We're just one week out. Next weekend is going to be a busy Sunday for us because that's our Sunday before we go. We're probably going to be pre-recording some content. So getting this as we're just approaching really very much as appreciated, especially after just the crapper of a year we've had for sponsors. 696,113 Satoche's, 32 unique individual senders and six members who boosted in.

Thank you everyone who supported episode 690 of your Unplug program. You made it happen. Boost.jupiterbroadcasting.com if you want to support us or jupiter. Dot party for the network membership or Linuxunplug.com slash membership for the membership that's just the show. You get the extra features and the free member boost, put your support autopilot. We do appreciate those messages very, very much. Thank you everybody who supported this episode of Linux Unplugged. A couple of picks.

before we get out of here. And we're going to start with telescope. And I have been pondering this because we do have a video version of this show. And we're just using webcams because it's kind of like a, you know, the main focus is audio. And one of our ways we remind ourselves of that is by having really crappy video. Minimum viable video. Yeah, non-viable. So that way we never really get too obsessed with it. But I thought, how hard would it really be if you had a couple of used Android phones around?

Decent enough cameras, better than what we're working with the hell. Hook them up to some permanent power. Get them on the network with a result. preserved IP. Nice little stand. Could even do USBC Ethernet and use them as cameras in the studio. They got good optics, right? But you need a good app to do that.

There's been some we've talked about before, and this week it's Telescope. Yeah, this is actually a PJ pick. Producer Jeff, even when he's out ignoring the show. Still taking care of the show. Yep, still taking care of the show. Use your phone as a webcam. And it actually is available not just for Linux, but for Windows as well. And of course, there's an Android companion app.

But I think the part that impressed me the most is the desktop app gives you a surprising level of control over the optics. Right? Who thought that was going to be a thing? I mean, you know, these devices have always had pretty nice cameras. You just get kind of a consumer-focused app by default to control it, let alone the network side of things. You could have the best-looking video on your Zoom calls now if you're doing like work calls.

And you already probably own the phone. And then you can pump it right into OBS as well if you want to do a live stream. Shows up as a virtual camera if you want to just put it into a conference call. It's pretty slick. Pretty pretty slick. So that is telescope. And of course we'll have a link to that in the show notes. And then because we've been talking a lot about jellyfin these days.

And I know some of you are getting a little jellyfin curious. There has been some recent Plex price increases but also some Plex security issues. So some of you may be getting more jellyfin curious. And so we wanted to link you to Plex to Jellyfin. You can migrate your Plex library to Jellyfin using this tool, and then you keep it clean forever. And so this handles things like some of the naming differences between Plex and Jellyfin that sometimes when you migrate trip Jellyfin up. It can de-dupe files. It can consolidate them.

It also can guard new downloads to make sure that they are conforming to what Jellyfin needs. And I think if you can maintain the Plex server, I haven't actually verified this, but I think if you maintain the Plex server to make sure they're staying in sync. And it's GPL3. Yeah, pretty neat, right? And I think I actually first saw this from Rama in Matrix. Oh, thank you for sending that our way. It does look like a very nice solution if you're trying to migrate. And they got a CLA as well. So you can do it that way, and a little tooy. And a web dashboard. And a web dashboard. They got all the things. They got a build from source. They got a Docker. They got an AUR. So pretty easy to get as well. It's never been a better time to be a jellyfin user.

Never been a better time. There's just more and more options, more and more things you can do with it. Keeps getting better. Mm-hmm. So check out Plex to Jellyfin. We'll have a link in the show notes. And you can find those show notes at Linux unplug.com slash 690. You know what else you'll find over on that website?

Oh, really, probably too large RSS feed. Probably is a little too large. What do you do about that, though? Well, we'd have to drop things from it. Yeah, and we've got a lot of good stuff in that RSS feed, including some additional metadata around the show. Oh, yeah. Yeah. Oh, you mean like the diarized VTT transcripts?

Yeah, I do. I did mean that. Or were you thinking of the cloud chapters? Well, only if you have them available in a way that would be really nice and structured for a clanker to look at. Do you have that for me? Well, how do you feel about JSON? I love JSON. I mean, I don't, but the machine does.

I couldn't care less. That's great. XML, JSON, we got it all. That's right. You might even find an MP4 hidden in there. If for some reason you'd like to see our ugly mugs or take a look at what we talked about. And are not yet upgraded to Android cameras. Yeah.

Yeah, get in before we have pixels throughout the studio. That's right, yeah. There you go. And then one last thing I want to let you know about before we run is it is extra special fun if you join us live. Make it a Tuesday, on a Sunday, over at jb.live.com. See you next week. Same bad time. Same bad station.

That's right. Join us, jbblive. TV at 10 a.m. Pacific. We won't be here at 10 p.m. Or 1 p.m. Eastern. There's a time zone thing you've got to figure out. Actually, you don't. Jupiter Broadcasting.com slash calendar.

It just converts it for you. The little thing there, you click it, tells you what it is. You don't have to worry about it. You can subscribe to it, then you just know. Why not? You could also just leave the live stream

playing in the background, so you make sure you don't miss it. There's also audio, if you're on the go, JBLLive.fm. And when we're not live, there's classic reruns. There you go. That's all I have.

Okay? You know about the website, you know about the show, and we just are so gosh darned, grateful you listen. Thank you so much for tune to this week's episode of your unplugged program.

Brent at Jupterbroadcasting. see you next week