Comment on Plex’s crackdown on free remote streaming access starts this week

• theangriestbird@beehaw.org ⁨2⁩ ⁨hours⁩ ago

  Setting up a reverse proxy and dynamic domain is not one click

  Maybe not for the server administrator, but for users, it’s mega easy. Download Jellyfin app on TV. Enter URL for server. Login like a normal streaming service. Done. As far as I know, Plex requires these same steps, so if Plex works for your 89 year old grandparents, Jellyfin would as well.

  Jellyfin has also yet to resolve the unsecured api

  In what way is the API insecure? What types of attacks are you concerned about?

  source

  • GraveyardOrbit@lemmy.zip ⁨32⁩ ⁨minutes⁩ ago

    Here is the primary writeup of the issues. My main problem is the way jellyfin staff handled this critique by downplaying and refusing to fix it

    github.com/jellyfin/jellyfin/issues/5415

    source

    • theangriestbird@beehaw.org ⁨25⁩ ⁨minutes⁩ ago

      I posted this below in reply to a similar comment. If you don’t like the way the devs have handled the raising of concerns, then fine, that’s kind of a judgment call and I can’t tell you what you should feel comfortable with. In my limited experience with the Jellyfin devs (including reading through the responses on that thread you linked), I do not personally get the impression that they are downplaying or refusing to correct issues. To me, it seems more like they are prioritizing some issues over others, and the outstanding security issues seem pretty minor for most use cases.

      source