• 2 Posts
  • 38 Comments
Joined 2 years ago
cake
Cake day: July 6th, 2023

help-circle








  • I’m not sure if you know this, but…that doesn’t fix most of the security issues in the linked list. All the reverse proxy does is handle hostname resolution and TLS termination (if you are using TLS). If the application being proxies still has an unauthenticated API, anyone can access it. If there’s an RCE vulnerability in any of them, you might get hacked.

    I run Jellyfin publicly, but I do it behind a separate, locked-down reverse proxy (e.g., it explicitly hangs up any request for a Host header other than Jellyfin’s), in a kubernetes cluster, and I keep its pod isolated in its own namespace with restricted access to everything local except to my library via read-only NFS volumes hosted on a separate TrueNAS box. If there is any hack, all they get access to is a container that can read my media files. Even that kind of bothers me, honestly.

    The overwhelming majority of Jellyfin users do not take precautions like this and are likely pretty vulnerable. Plex has a security team to address vulnerabilities when they happen, so those users would likely be a lot safer. I appreciate the love for FOSS on Lemmy, but it is scary how little most folks here acknowledge the tradeoffs they are making.





  • This will affect any server that does not already have a Plex Pass/ Lifetime Plex Pass. If your server does not have one, your remote users will have to pay. The service Plex provides is still worth it though, it largely just works on dozens of platforms and that shit isn’t free to make.

    Sharing a Jellyfin server with others remotely is still a lot more complicated than it needs to be to compete (no, it’s not as simple as opening a port, and if you think so then you’re either lucky or you aren’t sharing with lots of folks). I run both and I would never try to share Jellyfin with non-technical people. Honestly, I wish Jellyfin would start offering an optional paid relay service to fund their development. They could use the revenue to improve their app ecosystem and still produce mostly open-source software. Homeassistant does this with Nabu Casa and it’s great!

    That being said, the new Plex Android app kinda sucks ass. If there was anything that would make me switch it wouldn’t be having to pay for software, or services it’d be a garbage experience on my most common platform.



  • So, first off: calling out someone for repeatedly doing the same thing that isn’t solving the problem doesn’t require having a better answer. If I was trying to solve global warming by duct-taping cats together, you could point out that it isn’t working without solving global warming yourself.

    Second:

    • Lead general strikes
    • Refuse to follow the rules of order
    • Organize protestors everywhere any Republican congressman goes
    • Stop pretending that being civilized is getting them anywhere

    I think we all know they won’t do any of these things on their own, they need to be shamed into it. Without their supporters turning on them, the Democrats will continue doing nothing because it’s what their donors want.







  • It shouldn’t be any faster or slower if you’re using the exact same transcoding settings

    That’s sort of the point, both are based on ffmpeg but neither is using vanilla ffmpeg. Plex’s seems to work a lot better on the same hardware for me, but more importantly it’s not something you have to fiddle with. You just check the box and it figures out a decent setting. Jellyfin has some basic defaults for Intel/nVidia but there are a ton of tweakable settings that you have to go figure out.

    There’s probably some way to fix the issue but it’d take a ton of fiddling, and that’s the jank I keep referring to. A lot of people on Lemmy just ignore the rough edges and act like it doesn’t matter just because they can get past it or because it’s FOSS and they refuse to use anything else. Not everyone on here is a full-time software engineer, though; IMO it’s better to be honest about shortcomings and set expectations well. More people self-hosting their media is a net positive IMO.

    Plex has people they can pay to make their product better (and at least for the moment they’re still paying them), Jellyfin straight up doesn’t have those resources. I hope that changes because Plex is not on a good trajectory as a company. The Homeassistant model seems like a good one that gives people a good reason to contribute code and money, I really hope the Jellyfin guys do something along those lines.