GoatSynagogue

Just wait til movie studios start fishing for people hosting their movies illegally. With how everyone standardises their media structure and file names these days, finding people hosting your movie would be a cinch.

Accessing files unauthenticated……the devs explicitly say they won’t fix it…… and you think that’s not a huge security hole?

The person with a fundamental misunderstanding is you.

The developers of jellyfin themselves say it’s not.

VPN is the only way I would ever be doing it.

It’s not secure. It’s a horrible thing to do

You clearly don’t understand how Plex and port forwarding work if you think that is in any way the same as opening a port to the Internet for everyone to hit jellyfin with zero security on it.

The CVE has been exploited zero times that we know of, and at worst they can delete your media files and Plex server. It’s never been reported of happening, and we have no idea how difficult it is to do - but because it hasn’t happened, it’s probably extremely hard and requires a chain of very unlikely things to have happened first.

OK so you don’t understand networking, don’t understand how Plex works, don’t understand how that CVE does nothing of the sort, and have poor reading comprehension skills.

I’d hate to be your poor server.

He never claimed that in the comment you replied to.

Plex doesn’t open a port to the internet at large, unsecured no less, like jellyfin does.

That poster specifically said if you open jellyfin up to the internet ……

Anyone using jelling should not be exposing it to the public internet.