Comment on That's all folks, Plex is starting to charge for sharing

• vithigar@lemmy.ca ⁨5⁩ ⁨weeks⁩ ago

  Jellyfin has some security issues that, depending on who you ask, are either critical vulnerabilities that make it completely unsafe to expose to the Internet or largely unconcerning for regular users.

  source

  • cyberwolfie@lemmy.ml ⁨5⁩ ⁨weeks⁩ ago

    I’m not overly concerned about my instance running behind a reverse proxy. Perhaps I am just naive…

    source

    • MaggiWuerze@feddit.org ⁨5⁩ ⁨weeks⁩ ago

      Honestly yeah. The Jellyfin Backend is basically unauthenticated for a large part, allowing anyone to map and stream your content as soon as they guessed the ids, which isn’t that hard, since they are based on the paths on your device. So if your movie sits in /mnt/media/movies/the_bee_movie that is pretty esay to guess and calculate the id from, allowing anyone to stream that content from your server

      source

      • cyberwolfie@lemmy.ml ⁨5⁩ ⁨weeks⁩ ago

        And apart from an undesirable bandwidth usage resulting from someone guessing their way to my file structure, how can this be used to compromise my server?

        source

        • -> View More Comments
      • vardogor@mander.xyz ⁨4⁩ ⁨weeks⁩ ago

        if you reverse proxy into a VPN this isn’t an issue

        source

        • -> View More Comments