You must log in or # to comment.
What is/was huntarr? I love posts without any context.
Seems to be some sort of a tool that scans your media library and fetches missing media (the one that failed to download or something)
I am getting very annoyed reading “What is Huntarr?”, “The Real Problem: Why You Need Huntarr” and “Understanding the Gap Problem”. Am I too non-native english speaker to understand it or is it really the same 3 paraphrased paragraphs?
As the code was vibecoded, I guess that landing page was also llm generated, that could be the reason for the duplicate sections.
I believe it was supposed to monitor your jellyfin library and look for potential upgrades.
I guess it was supposed to be a successor to the *arr stack (radarr, lidarr , sonarr, etc). If you’re not familiar, they automate the downloading & organization process for movies, music, and tv.
I’m sure a successor will come around when room forms for them, I don’t know of a reason any of the core *arr stack should need one. If you know of one don’t hesitate to share, I’m just not really aware of any, they are awesome to me.
Personally I hate that sonarr is stuck on thetvdb when plex/jellyfin both primarily use tmdb. Usually it’s fine but for certain shows the differences can be unreconcilable.
I’ve been eyeballing https://github.com/maxdorninger/MediaManager but haven’t gotten around to it yet
Maybe it is a necessary evil…
I always get into problems with old shows/anime when I stick with Plex’s tmdb… If I switch to tvdb all my issues are gone.
Personally I prefer my software to give me options, I hate when stuff like this is picked for me when equally valid options exist
I don’t run 'arr anything, but that’s pretty wild.
Yeesh, in the hour since this has been posted the developer has:
- Made the /r/huntarr subreddit private
- Wiped and deleted their Reddit account
- Deleted the GitHub repo for Huntarr
Exposing any of the Arr stack to the internet is just bad practice in general IMO but bad actors will always be out there so it’s even more of a reason to practice good security.
I used huntarr for a minute and found it utterly useless. Didn’t trigger searches like it said it was doing. Uninstalled it after about 5 minutes.
Looks like Huntarr’s presence on Github is suddenly gone and their sub went private.
I’m not so much worried about ‘vibe coding’ as long as the dev actually knows the validity of the code presented in the LLM. At that point, the LLM becomes the assistant, not the dev itself. However, if I were to speculate, this dev team didn’t, got called on it, didn’t know how to respond or validate the code, so they closed up shop.
The term ‘vibe coding’ I think was originally about generating and using code without understanding it
Yeah doesn’t sound like vibe coding if you actually go through the necessary dances anyway, i.e double-check the produced code and validate it and actually understand it and the domain.
Edit: But almost nobody does. Because then you’d rather just write it yourself and save time, money and energy…
Well, I have used LLM to do code for in house type stuff. Very simple. In that scenario, it’s fairly good. I’ve found that LLM are good at compose files for instance. But that’s much different than producing a piece of software for thousands of people to use with confidence. Especially when dealing with anything 'arr and the mitigation that takes place to operate that in a secure, private, and anonymous manner.
That is some wild shit. Anyways for anyone else somewhat new to all this: when hosting anything, try to stick to reputable projects 1st and be always wary of shady installation tactics (I believe yesterday someone posted about curl bash. This is just a single example). If you want to try something new (as in brand new project), try it isolated 1st on some VM (proxmox helps a lot with this). When you are confident and more people give an approval, then think about putting on the main environment
try to stick to reputable projects 1st and be always wary of shady installation tactics
One of the first things I look for are longevity, last updated/activity, and then I look at the issues posted and responses. I like mature apps because I don’t possess the intelligence to audit code.
Hey friend, don’t undersell yourself. You do possess the intelligence, but maybe just not the skills.
Well, you’re very kind. I do know some coding, as in basic stuff. I can get around as it were. Most of it was learned from manually typing in pages of code from outlets like Byte magazine (zoom in) only to find out when you went to run the program, that you left out a semicolon on line # 5362 and a errant indent on line # 9241.
curl bash is not as bad as people think. Nobody downloads and reverse engineers binary packages off of these websites before running them with the same permissions.
Yes and no. It is definitely absolutely bad And yes people do embed things in binaries
Wow i literally just setup huntarr last night. Guess ill make sure its only accessible on wireguard.
This developed further. Better be done with it and stay safe. Read the linked reddit thread for info.
How so?
Vibe dev literally deleted the GitHub, the reddit and his accounts after being called out.
Vibe-coded slop is horribly insecure and the dev doesn’t understand the codebase?
shocked_pikachu.png
I can’t believe they banned that user for calling them out.
Thry sound like arrseholes
They banned the user that did the robust cybersecurity audit. They banned everyone who pointed it out or linked to the post or mentioned it. They took the subreddit private. The clown dev has a donate feature and claims that it will be used to put his daughter through school. Just scum all around.
From the original thread, I bring forth this comment from user sdrmme:
Huntarr2
Too good not to share.
Holy shit you unlocked a hidden memory I forget existed. Thank you.
What do you mean?, I don’t get what he/she is talking about.
“If you type your password, it automatically gets filters into asterisks. For example, my password is ********!”
Someone believed this. His password was hunter2.
Not sure what you mean. I just saw asterisks.
******** ?
