Well I already have jellyfin running in a container, just have to figure out how to get mum’s TV to work with it I guess

<edit> log in on a local IP and not the network name and it’s working again. but I’ll be moving to jellyfin from now

  • StritEnglish
    20•7 months ago

    From one of the Jellyfin devs in the issue you linked, posted in April this year:

    Now, let’s address this clearly once and for all. What is possible is unauthenticated streaming. Each item in a Jellyfin library has a UUID generated which is based on a checksum of the file path. So, theoretically, if someone knows your exact media paths, they could calculate the item IDs, and then use that ItemID to initiate an unauthenticated stream of the media. As far as we know this has never actually been seen in the wild. This does not affect anything else - all other configuration/management endpoints are behind user authentication. Is this suboptimal? Yes. Is this a massive red-flag security risk that actively exposes your data to the Internet? No.

    At this point, this over-4-year-old issue has gotten posted to HackerNews more than enough times and gotten quite enough unhelpful peanut-gallery comments like those above… We are limiting this issue to Jellyfin collaborators only at this point. Most of the big items are already tracked elsewhere (specifically, unauth playback) or have already been fixed. And many other options are now open to us in a post-10.11 landscape now that we have a proper library database ready.

      • StritEnglish
        10•7 months ago

        Yes, but it’s always the one people come back too.

        They mention the other issues are either being tracked elsewhere or already solved.

        At the end of the day, it’s a community project, done by primarily volunteers, who is not making any money doing this. No VC funding to hire developers to take care of these issues.

        • @TrickDacy@lemmy.worldEnglish
          3•7 months ago

          I understand there’s an explanation for it. Doesn’t make these things not things to consider when choosing one’s solution

      • ScrubblesEnglish
        1•7 months ago

        Feel free to go read the multiple writeups from the maintainers that go over each one, we don’t need to copy them all here into the comments for you.