n0xew

I agree the article isn't super clear. Reading it twice, it seems that the user credentials are exfiltrated to the C2 server (only the screenshot implies it), which definitely would be malicious.

Also a possible interpretation could be that the package advertised "just" some automations (e.g. export playlists to m3u?) and getting music metadata, whereas it was actually downloading musics locally unbeknownst to the user. Then exfiltrating the music back to the C2 server, effectively using the package's users to mass pirate musics without exposing the pirates directly. That would indeed be malicious, especially if the package did not advertise any content downloading.

But for the last paragraph I'm extrapolating on the few info this article gives without making much sense..

EDIT: from the original article here https://socket.dev/blog/malicious-pypi-package-exploits-deezer-api-for-coordinated-music-piracy it does not seem that the musics are downloaded on the user systems then extracted to the C2 server, but rather all that's necessary to build the download urls, including tokens tied to the victims' account.

Fladder!

Basically I've been using Jellyfin for some years for streaming. Once I got the steam deck, I thought it'd be awesome to use it for offline viewing of Jellyfin content when I'm too tired to focus on a game, on long trakn rides!

So I looked for Jellyfin desktop clients, found one that I liked with offline downloads, namely Fladder. The install process for the Steam Deck wasn't straightforward, so I learnt Flatpak packaging and submitted a PR to the GitHub project, which was well received. I can now watch my TV shows on the train when I don't feel like playing!

I successfully did it about 2 years ago, following the instructions from this repo (last commit 2 years ago though..) https://github.com/MMMZZZZ/Jellyfin-Migrator

For RTS (especially AoE II DE) I use them as:

• the SHIFT key(create 5 units instead of 1 when hold)
• activator for a different action group, where the joystick are mapped to a circular menu. E.g. one of these menu assigns units to one of the 6 quick groups in my circular menu, and I can then select these units with just the right joystick (no button pressed). Another one activates a right joystick circular menu to go to a building (and I did map nearly all building types..)

I can also combine these, to e.g. select all barracks

I'll have a look at decky dictation, sounds pretty handy. Thanks for sharing!

Oh I got one from when I was a kid: my sibling's friend once valled her an "invertebrate brain". I'm glad she didn't have any vertebrae in there!

Tried it on Android and Windows, I'm loving it! Finally I can synchronise movies on my laptop for travels, I have been looking for that for a long time! I can't wait for the fix for the Linux release to use it on the steam deck as well.

We have the same principle in French with (so learning Ihr in German was easier!), but frankly this is a reason why I prefer working in an english professional setting. Some people, generally older, get offended if you ever use the 'du' with them. But some others will want to look shill/younger and will get offended or mock you if you use 'du' with them. So yeah, using "you" to talk to the queen, my boomer customer or my nephew makes it so much easier!

You can have a look at hugo, with some simple theme like hugo-book

Solo:

• Break the loop - small indie roguelite with some fun mechanisms
• Cassette Beasts - never played Pokemon before so any comparison would be helpless here. But a nice deck game on the train for sure!

Coop:

• For the King II - loved the first one, they did good with the second one
• Wartales - with 2 other friends, it's our recurring Tuesday game night. Really fun gameplay!

It does look like a nice deck game. I only ever played World, but I eventually got tired by the endless grind. How is Rise in this regard?

Looks nice, I'll give it a try! There's also a Jellyfin community, don't hesitate to crosspost there :)