Si vous faites tourner un Plex Media Server quelque part chez vous, sachez que le 1er septembre dernier, Plex a publié un avis de sécurité qui demande aux propriétaires de serveur de passer en 1.43.3, et aux utilisateurs de l'application Desktop de passer en 1.115.0. Les versions 1.43.2 et antérieures sont donc toutes concernées.

Et c'est à peu près tout ce que l'annonce contient... Ils évoquent "un certain nombre de problèmes de sécurité", sans un mot sur ce qui est touché, ni sur la façon dont ça s'exploite, ni sur la gravité. Plex dit avoir demandé des identifiants CVE et promet de revenir publiquement donner des détails ensuite. Mais cela fait 8 jours et pour le moment, rien. Même la base de vulnérabilités du NIST ne renvoie rien sur "Plex Media Server"...

Mais de son côté, la Shadowserver Foundation , elle, n'a pas attendu les détails. En réponse à l'avis de Plex, elle scanne Internet tous les jours à la recherche des serveurs non patchés. Et à ce jour, elle en a dénombré plus de 36 000 exposés dont 16 000 rien qu'aux États-Unis.

Mais bon, peu importe... Comme personne ne sait ce que la faille permet, inutile d'essayer de jauger le risque. La seule question qu'on doit tous se poser, c'est de savoir si nos serveurs sont joignables depuis l'extérieur. Si l'accès distant est activé, ou qu'une redirection de port sur la box ou un sous-domaine pointe dessus, vous êtes sûrement dans le lot que Shadowserver a débusqué. Pire, des cybercriminels pourraient exploiter cette vulnérabilité... Donc mettez à jour rapidement.

C'est pas sorcier. Sous Windows, macOS et Linux, vérifiez que vous êtes bien en 1.43.3 ou plus récent, et sinon le paquet vous attend sur la page de téléchargement. Pour les installations Docker, Plex renvoie au README de son dépôt. Par contre, si votre Plex tourne sur un NAS, Plex prévient lui-même que le paquet peut ne pas encore être arrivé dans le magasin d'applications du constructeur. N'attendez pas qu'il descende tout seul, récupérez-le et installez-le à la main depuis l'interface du NAS.

Et si vous vous dites qu'un serveur de films n'intéresse personne, souvenez-vous de LastPass. En 2022, les attaquants sont entrés dans l'ordinateur d'un ingénieur de la boîte par son Plex Media Server , qui était encore sur une vieille version, et sont ressortis avec les coffres chiffrés des clients.

Alors allez-y.

Source : BleepingComputer

Most controllers ask you to adapt to them. The 8BitDo Ultimate 3E flips that arrangement entirely, building a controller around the idea that your hands, your genre, and your platform should decide its shape instead of the factory floor. The face buttons, the d-pad, and even the joystick tops snap in and out as swappable modules, turning what’s usually a sealed, one-size-fits-all object into something closer to a toolkit.

Pop off the magnetic faceplate and the accessory pack reveals its real purpose. A silicone membrane d-pad sits next to a tactile micro-switch version, and the joysticks come in tall, dome, and thick-neck shapes, each suited to a different grip or genre. Racing games favor a different thumb position than platformers, and for once, the hardware bends to match instead of forcing a single compromise across everything you play.

Designer: 8BitDo

Underneath those swappable caps, the joysticks themselves run on Tunneling Magnetoresistance sensors, a technology built specifically to resist the drift that eventually creeps into analog sticks after enough hours of use. Interactive RGB fire rings pulse around the base of each stick, translating movement into visual feedback in real time, a small touch that turns an otherwise invisible input into something you can actually watch respond.

The triggers carry their own bit of adaptability. Hall-effect sensors power two selectable trigger-stop positions, letting a shooter’s hair-trigger tap coexist with a racing game’s need for a longer, more gradual pull. Switching between them takes a flick of a physical switch, not a trip through a menu, which matters when a genre change happens mid-session rather than between them.

Connectivity spreads just as wide as the physical customization. The Ultimate 3E runs 2.4G wireless and wired modes for Xbox and PC, and switches to Bluetooth for mobile devices, now backed by a USB-C signal adapter for steadier range across more rooms and setups. Apple has officially signed off on compatibility too, covering iPhone, iPad, Mac, Apple TV, and even Apple Vision Pro, stretching the controller’s use well past the console it was designed around.

An integrated wireless charging dock handles power without cables cluttering a desk, while two pro-level back buttons and a pair of extra-fast bumpers add inputs for players who map more complex combinations. Three custom profiles let different games, or different people, keep their own configuration ready to load instantly, and a 3.5mm jack keeps wired headphones in the mix for anyone who still prefers a physical connection over Bluetooth audio.

None of this treats customization as an afterthought bolted onto a finished product. Every swappable piece, every sensor choice, feels like it was scoped out before the shell was ever molded, built around the idea that serious players tend to have very specific, very personal preferences about how a controller should feel in their hands.

The post The 8BitDo Ultimate 3E Is the LEGO Set of Gaming Controllers first appeared on Yanko Design.

Desks are overrated. So are the cables that come with them. The 4URPC is a 15.6-inch wireless touchscreen monitor built for people who’d rather not be chained to an outlet just to get a bigger screen. It’s slim, self-powered, and ready to mirror whatever’s on your phone, tablet, or laptop the moment you need more room to work, watch, or play.

Cutting the cord doesn’t mean cutting functionality. The monitor mirrors an iPhone or Android device through a peer-to-peer wireless connection, no home Wi-Fi or app required. For streaming platforms like YouTube, Netflix, or Hulu, connecting to Wi-Fi and tapping the built-in TV Cast icon sends video to the screen. Either way, there’s no dongle to lose or cable to untangle before the movie starts.

Designer: 4URPC

Click Here to Buy Now: $219 $399 (45% off). Hurry, only 451/600 left! Raised over $181,000.

The more interesting trick happens after mirroring starts. The 10-point touchscreen can send input back to the connected phone, turning the monitor into a larger, shared control surface. Flip through photos with a friend, walk a colleague through a presentation, or hand someone the reins without handing over your phone. It’s a shift that makes shared screen time less awkward.

None of this would matter much if the monitor were bulky. At half an inch thick and just over 2 pounds, it’s built to disappear into a backpack rather than dominate it. The matte, textured shell keeps fingerprints and glare to a minimum, and a fold-out kickstand on the back means setup takes seconds on a desk, a kitchen counter, or the arm of a couch.

A built-in 4,000 mAh battery backs up that portability by taking the wall outlet out of the equation. Setting up on a train, in a hotel room, or on a patio doesn’t mean scouting for the nearest plug first. That same battery can lend a charge to a connected phone, turning the monitor into a backup power bank when the moment calls for it.

Plug it into a laptop with a USB-C cable, and the 4URPC switches roles, becoming an extended display rather than a wireless mirror. Dragging a browser tab, a chat window, or a reference document onto the second screen takes a second, and the touchscreen works over the wired connection. The laptop stays focused on the main task while the extra display handles everything else.

The screen also rotates between landscape and portrait without any fuss, which sounds minor until it changes how you use it day to day. Landscape suits video calls, games, and spreadsheets, while portrait mode fits scrolling through documents, reading long articles, or checking social feeds. Switching between the two takes a twist of the stand, not a trip through a settings menu.

Compatibility runs wide enough that most people won’t need to think twice before connecting. Wireless mirroring covers iPhones, Android phones running version 10 or later, MacBooks, and most Windows laptops, while the wired USB-C or HDMI input works with game consoles, streaming boxes, and the Nintendo Switch. There’s no software to install and nothing to configure; connecting the device and turning it on is the entire setup process.

Under the glass sits a 1920×1080 matte IPS panel running at 60 Hz, built more for comfortable, glare-free sessions than eye-popping color numbers. Dual USB-C ports split power delivery and video duties, small stereo speakers cover casual audio, and a VESA mount plus a standard camera screw thread add mounting options beyond the built-in stand. It’s a practical set of choices rather than a flashy one.

There’s something telling about a monitor that assumes you won’t always be sitting at the same desk tomorrow. Work has scattered across kitchen tables, coffee shops, and airport gates for a while now, and screens are only starting to catch up. The 4URPC doesn’t try to be the sharpest or brightest display around; it just tries to be wherever you happen to land next.

Click Here to Buy Now: $219 $399 (45% off). Hurry, only 451/600 left! Raised over $181,000.

The post Your Second Screen Can Finally Work With No Cables and No Outlet first appeared on Yanko Design.

There are several times a day when you’ll want to sit down and take in the aroma of your favorite essential oils. It might be early in the morning to help you wake up, right when you start work and need a boost of energy, at the end of the day when you’re relaxing, journaling, or reading, or right before bed so the scent can help you settle into a good night’s sleep. At any of those moments, your oil diffuser is your best friend, that is, unless it runs out of battery or charge right in the middle of your routine.

If you’re using the Battery-Free Aroma Diffuser, that’s one problem you’ll never have. As the name suggests, it’s completely battery-free and skips the fancy ultrasonic tech found in most diffusers on the market. All you need is a candle; its rising heat spins a built-in propeller that carries the scent of your essential oil of choice, and you’re all set to relax or recharge, whichever one you need. Setting it up becomes part of your morning or nighttime ritual, giving you what’s been called “magic powered by a single flame.”

Click Here to Buy Now: $290.00

This diffuser was designed by Yu Ito and Yoshimi Kemmotsu of SOL style. Most diffusers on the market run on batteries, charging cables, and plastic ultrasonic components. This one skips all of that and works on nothing more than physics, heat, and fire. Its minimalist, elegant design only adds to the “magic” of the experience, as you watch your essential oils fill the room in a way that feels almost mystical. Because so much of the piece is transparent, you can see exactly how it works, from the flickering candle flame to the visibly spinning propeller above it.

The process of using the diffuser is refreshingly simple and doesn’t involve a lot of steps. Start by placing your essential oil of choice in the dedicated compartment located at the center of the propeller. Light a candle and set the cover in place. Wait about two to three minutes for the rising heat to spin the built-in propeller, and once it’s turning, it will carry the scent of your oils and fill the space around you.

The diffuser itself is built from aluminum, glass, and iron, materials chosen for being sustainable and long-lasting, so you’re not contributing to the pile of dead batteries or broken plastic housings that come with most electric diffusers. Because it needs no outlet and no batteries, it’s also completely portable. Set it up on your dining table, your nightstand, or even take it outside for a quiet evening on the patio.

If you’ve shopped for a diffuser before, you’ve likely come across a big name like Vitruvi, whose Stone Diffuser is frequently ranked among the best overall by outlets like Wirecutter and InStyle. Vitruvi’s design is genuinely beautiful, but it’s still an electric, ultrasonic device that needs to be plugged in or charged to run. More budget-friendly brands like InnoGear and Urpower take a similar ultrasonic approach at a much lower price, but they typically trade craftsmanship and material quality for affordability, leaning on plastic components that don’t hold up as well over time.

The Battery-Free Aroma Diffuser doesn’t try to compete on mist output, app connectivity, or color-changing lights. Instead, it carves out its own lane by focusing on ritual, sustainability, and craftsmanship. You won’t get smart features or adjustable settings, but you also won’t ever need to charge it, replace a battery, or worry about internal electronics failing. It does come at a premium, priced around $249 compared to the roughly $30 to $130 range most ultrasonic diffusers occupy, but for design lovers and sustainability-minded shoppers, that price reflects a genuinely different kind of product rather than just another gadget competing on specs.

At the end of the day, the Battery-Free Aroma Diffuser isn’t trying to be the most powerful or the most tech-forward diffuser on your shelf, it’s trying to be the most memorable. Whether you’re using it to ease into your morning coffee, get into a work groove, unwind after a long day, or settle in before bed, lighting that single candle and watching the propeller slowly spring to life feels far more intentional than simply pressing a power button. It won’t die mid-session, won’t need a replacement battery, and won’t end up as e-waste a few years down the line. For anyone looking to turn aromatherapy into an actual experience rather than just another appliance to switch on, this quiet, flame-powered design might be one of the most beautiful ways to get there.

The post Japanese Designers Just Solved the Dead Battery Diffuser Problem first appeared on Yanko Design.