Rendered at 21:18:43 GMT+0000 (Coordinated Universal Time) with Cloudflare Workers.
hexfish 15 minutes ago [-]
I am by no means a professional DJ but once I hooked up my DDJ-400 to Mixxx (https://mixxx.org/) I never looked back. It was suprisingly complete for me (but ymmv when actually being a pro DJ).
j-scott 2 hours ago [-]
Rekordbox is one of the worst pieces of software I have to interact with regularly, and it reminds me of others descriptions of IoT software/firmware.
"PRO DJ LINK" enables you to access rekordbox libraries (and load music files) remotely from other devices, whether that be on a computer or dedicated Pioneer/AlphaTheta hardware.
The vulnerability in question requires the attacker to be on the same local network as the instance of rekordbox and for the remote library feature to be enabled. Interested in the full writeup once it's released
butterknife 2 minutes ago [-]
Truly terrible platform. I engineer DJ events and every single time there will be someone who had used either too new or too old version of rekordbox for the model of CDJ/controller the venue got in. This is seemingly random and totally undocumented. If I had hair I would have torn them out long time ago.
peterlk 2 hours ago [-]
Preach! I spent several hours this weekend trying to move my library between computers. So many popups and warnings telling me that I need to do something with no explanation of why. The docs are a mess. The library compatibility is a mess. Every few months they do something that fucks up libraries or makes them incompatible with some hardware. I just refuse updates now.
Rather than trying to make a new, shiny library, they should just release rekordbox 2.0, and then everyone would have a common lexicon to ask whether something is “rekordbox 2 compatible”. But instead we have this questionably compatible library plus as part of old, busted software that tries to brow best you into wrecking your old libraries.
I just use Claude to explain rekordbox to me now, and it is a bit more helpful than forums, though it also often gets confused from the conflicting advice/docs on the internet
MadnessASAP 1 hours ago [-]
They do not care, AlphaTheta is well down the enshittification road. They captured all the DJs, then they captured all the venues, and now they'll squeeze both for profits until a sufficient critical mass has built to trigger a collective switch away from them. At which point executive bonuses will be paid, investors will get their returns, and the PioneerDJ brand will be sold to an even scummier company to wring a few more dollars out of it.
MadnessASAP 1 hours ago [-]
I too also have a special place of hate for Rekordbox. However I'm somewhat confused by this vulnerability, isn't plug n play unauthenticated file access essentially a core feature of "PRO DJ LINK"? The security mitigation, and best practice, being to have the involved devices connected on a entirely private LAN. I've never tried connecting them to a "public" network.
j-scott 22 minutes ago [-]
The feature definitely does what it says it does, but I think that the mount is generally accessible outside the software may be where the “surprise” lies.
I definitely would not have used this feature on a public network or exposed the mount to the open internet as well.
"PRO DJ LINK" enables you to access rekordbox libraries (and load music files) remotely from other devices, whether that be on a computer or dedicated Pioneer/AlphaTheta hardware.
The vulnerability in question requires the attacker to be on the same local network as the instance of rekordbox and for the remote library feature to be enabled. Interested in the full writeup once it's released
Rather than trying to make a new, shiny library, they should just release rekordbox 2.0, and then everyone would have a common lexicon to ask whether something is “rekordbox 2 compatible”. But instead we have this questionably compatible library plus as part of old, busted software that tries to brow best you into wrecking your old libraries.
I just use Claude to explain rekordbox to me now, and it is a bit more helpful than forums, though it also often gets confused from the conflicting advice/docs on the internet
I definitely would not have used this feature on a public network or exposed the mount to the open internet as well.