• oshu@lemmy.world
    link
    fedilink
    English
    arrow-up
    7
    arrow-down
    4
    ·
    14 hours ago

    Plex clearly scans your media collection and does upload the metadata and they can add more data collection any time they want.

    Privacy won’t matter if a major studio catches wind of this type of vulnerability and decides to start scanning for jellyfin instances. The subpoenas will come shortly after.

    How are they going to scan a server on my network thats behind my firewall with nothing open to the internet?

    • Saik0@lemmy.saik0.com
      link
      fedilink
      English
      arrow-up
      5
      arrow-down
      5
      ·
      14 hours ago

      Plex clearly scans your media collection and does upload the metadata and they can add more data collection any time they want.

      No. The local metadata agent requests the data, it doesn’t upload a list of what you have but requests the metadata it’s missing. And you could say that a log collection of what data it retrieves is risky… except now they cram so much nonsense on the home page that all of that is fluff that would obfuscate that heavily…

      But you can configure the meta-agent. You can not request it at all.

      How are they going to scan a server on my network thats behind my firewall with nothing open to the internet?

      So then you agree with my initial statement that I start with of “people need to implement it sensibly knowing the potential risks.”?

      If so… then why get into a hissy fit over this when my statement was clear? People shouldn’t implement Jellyfin without understanding the risks… it’s not innately secure and requires additional solutions to make it use-able. And thus, should be recommended only when that is disclosed.

      • oshu@lemmy.world
        link
        fedilink
        English
        arrow-up
        6
        arrow-down
        4
        ·
        14 hours ago

        Where did I disagree with you?

        I’ve repeatedly pointed out that Jellyfin is great for a self-hosted home media server. If you use it as intended then its security is not an issue.

        Its not for running an internet tv service for others.

        I don’t really understand why this causes some people to go off on a rant about how hard it is to explain a vpn to their grandmother. That’s not something I’ve ever suggested.

        • Saik0@lemmy.saik0.com
          link
          fedilink
          English
          arrow-up
          6
          arrow-down
          5
          ·
          14 hours ago

          Its not for running an internet tv service for others.

          Because you keep missing the point that spouse or others that live with you but aren’t literally at the house are also “remote” users who are part of the same home.

          If you use it as intended

          I’ve never seen any Jellyfin document claim that it’s intended to be used behind a VPN or strictly in LAN operations. And actually have seen it directly advertise itself as something to share with others.

          https://jellyfin.org/

          Would be hard to share with family and syncplay if we’re only talking about LAN access.


          https://jellyfin.org/docs/

          It is an alternative to the proprietary Emby and Plex

          Comparing themselves to Plex directly in usage.


          https://jellyfin.org/docs/general/post-install/setup-wizard/

          Some basic options for networking can be set on this page. For most users, it is recommended to enable the “Allow remote access to this server” option

          Not needed if this is a local only server. default configuration guide…

          Lets ignored the “networking” section all together… Nearly all of that is only relevant if your exposing it to the internet directly but if outs itself as “This document aims to provide an administrator” so not meant for the typical user.

          So are you right that it’s meant to be local only? Or the creators themselves that run the website and advertise it for sharing and external connecting?

            • Saik0@lemmy.saik0.com
              link
              fedilink
              English
              arrow-up
              2
              arrow-down
              1
              ·
              11 hours ago

              I’m mildly confused… Am I the troll or them?

              I legitimately think that they believe the service is “meant” to be use local only… but the product page doesn’t lead me to believe the same thing… While I’m likely going about it in a bit of an asshole way, I’m trying to figure out which of us is “correct” here. If there’s a disconnect I want to rectify it… if there’s a clear disagreement, then I can understand and take that… I’m just trying to hash it out.

              • AtariDump@lemmy.world
                link
                fedilink
                English
                arrow-up
                2
                arrow-down
                1
                ·
                edit-2
                10 hours ago

                Them.

                You’re right that if it was supposed to be run in local only mode there wouldn’t be a streaming over the internet option.

                • Saik0@lemmy.saik0.com
                  link
                  fedilink
                  English
                  arrow-up
                  3
                  arrow-down
                  1
                  ·
                  edit-2
                  9 hours ago

                  I’m going to be mildly honest here…

                  I did troll a little… In that I kept this one in the back pocket waiting for a rebuttal…

                  Why set port on UPnP router/firewall if you don’t want it accessible to the internet…

                  So maybe we’re both trolls in this specific chain? But I guess I was hoping that there was some common ground to find. I don’t know.

                  Edit: Oh and this one…

                  Edit2: Decided to gif it because it’s an opportunity to rick roll someone…https://lemmy.saik0.com/comment/4667902

          • AbidanYre@lemmy.world
            link
            fedilink
            English
            arrow-up
            1
            arrow-down
            1
            ·
            10 hours ago

            Some basic options for networking can be set on this page. For most users, it is recommended to enable the “Allow remote access to this server” option

            Not needed if this is a local only server. default configuration guide…

            Yes it is if you want to use it from any other computer on your lan.

            • Saik0@lemmy.saik0.com
              link
              fedilink
              English
              arrow-up
              1
              arrow-down
              2
              ·
              edit-2
              9 hours ago

              It’s working fine for me with it unchecked… Okay fine, let’s say I did something nonstandard.

              What about the other items? The hundreds of references by their dev team about exposure to the internet in the git? the dozens of others on the site?

              Edit: My point is made even if we sans one specific one…

              Edit2: or how about this… let’s replace that one with this one?

              What’s the point of this checkbox if not for attempting to get the server directly internet accessible?

              Edit3: Just so we’re on the same page that you’re wrong though…

              • AbidanYre@lemmy.world
                link
                fedilink
                English
                arrow-up
                1
                arrow-down
                1
                ·
                edit-2
                54 minutes ago

                Ok, so maybe I was mistaken, or maybe it takes a restart for that seeing to take effect. It’s hard to tell from one gif. I remembered it not working when I had that unchecked.

                Good job being a complete shitheel about it though. And you wonder why people think you’re a troll and/or shill?

                • Saik0@lemmy.saik0.com
                  link
                  fedilink
                  English
                  arrow-up
                  1
                  ·
                  9 hours ago

                  Sorry, but nothing uncivil about it. Funny thing though I never called you a shill, troll, shitheel nothing… I just presented a simple rebuttal to your argument… but because it hurts your feelings to be wrong… now I’m all these names. Crazy!