• 0 Posts
  • 15 Comments
Joined 2 years ago
cake
Cake day: July 8th, 2023

help-circle






  • Sorry, I wasn’t clear. When I said “why do you care?”, I didn’t mean YOU specifically with OPs potential problem of losing users.

    I meant why do people in general, who self-host software for friends/family, care if their friends/family stop using the software.

    E.g. I have friends on Plex, but for whatever reason, I decide I want to move to Jellyfin. My friends stop streaming my media because they dont like jellyfin for whatever their own reasons may be. I personally wouldn’t care about losing them as “users”, because it’s not like they are paying customers. I let them access my instance for free, if they aren’t bothered enough to use it, then thats on them, not me to cater to their needs by keeping Plex around.

    Hope that cleared up my meaning. I wasn’t attacking you for caring with your original response.

    p.s. you are at risk by hosting Plex too, just in different ways. Plex still requires your server is open to the internet, right? Even if only Plex’s servers can access it, who’s to say Plex themselves don’t get hacked. Always a risk/reward type deal with hosting software, in my opinion, either are fine to expose.


  • Yes, you are right, but I think my point was missed.

    Theres not much reward for hackers to hack private jellyfin hosts (unless there is some big exploit that gives remote code execution that im unaware of), sure the bots will scan and try exploits on open ports, but are they specifically targetting jellyfin?

    There is always a risk, but in my opinion, the chances of being hacked through jellyfin are way too low to bother with over-bearing measures, like a required vpn connection.

    Running jellyfin in a secure manner (without root, only access to your content, etc) reduces the risk of much harm too.




  • I find it hard to believe that there are bots scanning for jellyfin exploits, since as far as I’m aware, the exploit is for viewing content without auth. 99% of bots are scanning for old instances of wordpress or other outdated software to exploit.

    If my content on Jellyfin was illegitimate, the person scanning for my files would have to prove that before they can sue, no? I don’t think this makes sense for anyone to do.

    p.s. I won’t argue that YOU should setup software that you dont want to, just that this particular reason not to may be a bit farfetched.


  • I agree with you, it’s likely this vulnerability is only known because Jellyfin is open source… how many are hiding in Plex’s proprietary source code…

    Anyways when has anyone ever been pwnd by this “exploit”, I have seriously never heard of anyone being “hacked” by one of them.

    Definitely overblown as far as I am aware… don’t post your instance url all over the internet and you will likely be fine.

    Using Plex (is fine, do whatever u want) and giving them your data instead doesn’t really help you (or at least sending your data through them).




  • dogs0n@sh.itjust.workstoPrivacy@lemmy.worldCars are scary
    link
    fedilink
    English
    arrow-up
    1
    ·
    edit-2
    27 days ago

    I don’t know why the car has the persons name, but it’s the same thing with most peoples smartphones. People usually never turn off bluetooth when not in use and it’s always blasting their name. Though it is of course easier to see who Oscar is when there’s a whole car model to match it to.

    For car’s, I wonder why they can’t only blast a device name while in pairing mode. Dunno of it’s just not a possibility, but that seems smort.