Most of the time you can’t just join a couple having sex either…
Like, if you just stumbled across a couple people doing the sideways tango in the woods; they probably aren’t going to just let you strip down and join in.
🇨🇦
Most of the time you can’t just join a couple having sex either…
Like, if you just stumbled across a couple people doing the sideways tango in the woods; they probably aren’t going to just let you strip down and join in.
I use https://filebrowser.org/ for this.
Nice lightweight filebrowsing/sharing with user management. Users can have their own dedicated directories, or collaborate.
You can also create share links that allow anyone with the link to view/download files. Optionally password protected.
Here’s a demo you can mess with: https://demo.filebrowser.org/ User: demo Pass: demo
Maybe, but the homeless crackhead shambling through the lot at 3am like a zombie doesn’t give a fuck and will kick that thing as hard as he can muster.
Move it anyway; at least it will have a chance instead of painting a massive target on it with those cones.
I’m so tired of seeing this overblown reaction to ancient non-news.
Yes, there are some minor vulnerabilities in Jellyfin; but they really really aren’t concerning.
Unauthenticated, a random person could potentially (with some prior knowledge of this specific issue, and some significant effort randomly generating media UUIDS to tryout) retrieve/playback some media unauthorized. THATS IT. That’s the ONLY real concern. And it’s one you could mitigate with a fail2ban filter if you were that worried about it.
The other ‘issues’ here, are the potential for your already authenticated users to attack each others settings. Who do you share your server with that you’re concerned about them attacking each other???
Put this to bed and stop fussing over it. It’s genuinely not worth your time or attention. Exposing Jellyfin to the net is fine.
Dev comment on the situation: (4 days ago) https://github.com/jellyfin/jellyfin/issues/5415#issuecomment-2825240290
Stop. FUCKING.
TOUCHING. ME.
MONCH