I missed it last year, but not this time.

There's about 33 hours left of the sale at the time of this post.

Edit: it's finished now, but they have it every year in July/August. I watched their mastodon for the announcement.

cross-posted from: https://lemmy.world/post/50148512

Original post here [redlib link].

Written by deluan

The next release normalizes every ID in the database into a single format. It runs a one-time migration on first start. The PR with this change will be merged this weekend: https://github.com/navidrome/navidrome/pull/5824

If you run develop or auto-update, this lands soon (this weekend) and without warning. Make a backup of navidrome.db now. The migration is one-way, so rolling back (if needed) means restoring that backup.

The short version:

• Takes ~30s to ~1m20s on my 96k-track library (QNAP Celeron). Scales with library size.
• Everyone gets logged out once. Web UI and clients using the Navidrome API need to log in again. Subsonic clients authenticate per request, so they are unaffected.
• Song IDs change, album and artist IDs do not. Clients that cache song IDs (offline downloads, cached playlists) may need a re-sync.
• Cover art gets re-fetched, so the first browse after upgrading is slower.
• Share links keep working.
• Nothing is lost: favorites, ratings, play counts, bookmarks, play queues, scrobble history and Last.fm / ListenBrainz links all survive. No rescan needed.
• One manual fix: .nsp smart playlists using inPlaylist or notInPlaylist keep the old playlist ID on disk and need updating by hand.

Full write-up: https://gist.github.com/deluan/917ebc243c8b486101de857ffae6739b

If you can, please test it with your favourite client once it is merged, and reply here (or on our Discord) if anything looks off.

EDIT: For app/client developers: I'll merge the topSongsByArtistId PR at the same time as this ID migration. This means that you'll be able to detect if a server is migrated by checking the getOpenSubsonicExtensions response and looking for the topSongsByArtistId extension.

Touch grasshopper with me:

https://canvas.fediverse.events/#tu=https%3A%2F%2Fi.postimg.cc%2FHsD04zbX%2Fpixel-grasshopper.png&tw=34&tx=212&ty=260&ts=DOTTED_BIG&x=229&y=277&zoom=1

This is good fun, as always, but I've gone afk and am not enjoying the mobile experience as much as desktop because I keep having to click through the welcome modal and/or deal with a screen covered in duplicate (and superseded) errors. Sometimes it's more errors than fit on the screen so I get it multiple times.

Please only one of each error.

If you'd like to help, here's the template:

https://canvas.fediverse.events/#tu=https%3A%2F%2Fi.postimg.cc%2FzXsW8mZ3%2Fpixel-duck-template.png&tw=28&tx=361&ty=347&ts=ONE_TO_ONE&x=375&y=361&zoom=1

I'm a little late with this news, but it's a good write-up.

The unread file was src/_probe/never_read_canary.txt, planted with a unique marker. Cloning the captured bundle recovered it verbatim along with the repo's full commit history, and the same test replicated on a second, unrelated repo.

The Linux kernel has recently been facing a series of discovered privilege escalation vulnerabilities, starting with the Copy Fail vulnerability and followed by subsequent vulnerabilities in the same spirit (Dirty Frag, Fragnesia). This development is part of a general trend where vulnerabilities are being found - and disclosed - faster than before. We expect it to continue, at least for the short-term.

The Gentoo Linux Kernel and Distribution Kernel teams are doing their best to keep Gentoo kernels secure. This includes both packaging the latest upstream releases as soon as possible, and backporting additional vulnerability fixes or mitigations whenever they become available. As example, while upstream kernel releases are still vulnerable to Fragnesia, the respective Gentoo kernels feature fixes from day one. At the time of writing, all supported Gentoo kernels feature the latest Fragnesia v5 patch. Please expect more updates. We recommend exploring ways to automate upgrading your kernel.

Please note that only sys-kernel/gentoo-kernel, sys-kernel/gentoo-kernel-bin and sys-kernel/gentoo-sources packages are security-supported. The vanilla kernel packages are vulnerable at the moment. Other kernel packages may carry fixes, but they usually are slower to be updated. Additionally, we recommend running the latest kernel version (~arch or latest stable LTS), as upstream does not reliably backport security fixes to older versions.

CPUID has since confirmed the breach, pinning it on a compromised backend component rather than tampering with its software builds.

"Investigations are still ongoing, but it appears that a secondary feature (basically a side API) was compromised for approximately six hours between April 9 and April 10, causing the main website to randomly display malicious links (our signed original files were not compromised)," one of the site's owners said in a post on X. "The breach was found and has since been fixed."

Original IFF Deluxe Paint images from back in the day, courtesy of the Amiga Graphics Archive.

This is the one that always makes me think of DPaint:

source

My favourite bit is this from the comments:

I wrote "please do not deliver this letter" on a correctly addressed and stamped letter once, it never arrived. A thrilling day indeed.

I love Doom Bar and I'm not alone since it's among the bestselling cask ales in the UK, but it seems that the US owners are going for a quick payout by closing and asset stripping what's left.

I wonder how long until they start building houses or an industrial park on the old site?

This video covers Great Ormond Street Hospital, Quality Street and copyright special cases.