Well. If you’re not streaming why have such a service in the first place? If I didn’t stream remotely with Plex (and share with my friends and family) I’d just go back to running Kodi on my htpc like I did ten years ago.
Comment on Plex got hacked.
Logical@lemmy.world 2 weeks agoBut if you just run it locally an a media server in your home, and you don’t expose the service to the internet, that doesn’t really matter? Though perhaps more people connect to their Jellyfin instances remotely than I realize.
cosmo@lemmy.world 2 weeks ago
nonfuinoncuro@lemmy.zip 2 weeks ago
steam locally to multiple devices plus for remote streaming I just VPN into my home network
cosmo@lemmy.world 2 weeks ago
Fair enough.
thax@lemmy.dbzer0.com 2 weeks ago
It matters if someone manages to hide an exploit in jellyfin’s codebase, or more likely, a popular plugin. I imagine many folk have permissive outgoing firewall rules, in which case, an exploit could establish connectivity. Whether that eventually leads to privilege escalation on the jellyfin host would depend upon other variables.