Comment on Plex’s crackdown on free remote streaming access starts this week
theangriestbird@beehaw.org 3 weeks agois there some security incident you have in mind involving jellyfin?
Comment on Plex’s crackdown on free remote streaming access starts this week
theangriestbird@beehaw.org 3 weeks agois there some security incident you have in mind involving jellyfin?
MaggiWuerze@feddit.org 3 weeks ago
Beside the various security holes that have been ignored for years by the devs?
theangriestbird@beehaw.org 3 weeks ago
such as…?
MaggiWuerze@feddit.org 3 weeks ago
github.com/jellyfin/jellyfin/issues/5415
theangriestbird@beehaw.org 3 weeks ago
So, I am not going to deny that those security issues exist, but it seems like they would only pop-up in niche situations, or only if someone already had access to your admin profile. Most people are using Jellyfin to share their media with themselves and their tech-illiterate friends in family. In that use case, the only people who even know my server URL are people I have shared that info with privately. Nobody is trying to hack my admin account.
Now, I am no infosec expert. Maybe there are folks that are trying to run larger operations, and for those people I can understand why these security issues may become concerning if you don’t have a tight handle on the circle of people that have access to your server. That said, it’s also a bit silly to expect a free, open source solution to meet your needs in that scenario, anyway. If you know and understand the issues that well, then maybe go join the dev team and patch the holes. That is the beauty of open source, anyone can jump in and fix it.