Comment on Round Two: Can I manage to set up Jellyfin correctly this time?
dogs0n@sh.itjust.works 1 day agoIt’s honestly just a matter of how much risk you are comfortable with for using jellyfin on the open internet.
(If i remember correctly:) The unauthenticated routes thing can only be used for streaming your content without a login (if you can guess the contents ids on your server I believe).
In my opinion, it’s not worth the hassle of using a vpn because I don’t think this risk is worth mitigating with one.
But everyone has their own personal risk assesment of course.
frongt@lemmy.zip 1 day ago
Yes, those are the known vulnerabilities. We don’t know how many unknown vulnerabilities could be discovered in the future.
Auli@lemmy.ca 11 hours ago
And are these the ones they let people see what media I have or are there any serious ones?
dogs0n@sh.itjust.works 1 day ago
Unfortunately no software exists that is fully perfect in this regard (any program could have multiple bugs just waiting to be found), but jellyfin being open source puts it in a better situation for finding vulnerabilities sooner.
ITGuyLevi@programming.dev 1 day ago
At least we are more likely to hear about them than we would for PMS. Quickest way to find vulnerabilities is to have as many eyes as possible on it, if you only let the 20 devs you employ look a lot can be missed. Just my opinion though.