you’re not particularly worried about “someone”, you’re worried about bots that are scanning IP ranges and especially default ports. A lot of people will install a program, not really understand what it does, and forward a port because the setup told them to. Then proceed to never update the program (or it’s a poorly secured program in the first place).
reddit: nico_is_not_a_god pokemon romhacks: Dio Vento
- 0 Posts
- 21 Comments
if they got in…
You’re trusting Jellyfin to not have some form of privilege escalation attack available. I’m not saying they do have one or that anyone’s exploiting it in the field, but yeah. Also if your Jellyfin admin account is allowed to download subtitles to content folders, a “just fuck shit up” style vandal-hacker could delete your media probably. If you mount the media read-only that wouldn’t be a concern.
Do note that without that layer you were using Pangolin for, your system might be compromised by a vulnerability in Jellyfin’s server or a brute force attack on your Jellyfin admin account.
Everyone I know that actually keeps backups has the same kind of story. It’s sad that no matter how many other people talk about keeping backups, it always takes a tragic loss like this to get people to buy hardware/subscriptions.
pory@lemmy.worldto Selfhosted@lemmy.world•TubeArchivist alternatives that store data in an archive friendly manner?English1·4 days agoI settled on Tubesync. Pinchflat mysteriously stopped downloading new vids from a playlist I had it monitor. Surely I could have fixed it by checking logs or whatever but Tubesync has the exact same feature list and no downsides, so I just killed my pinchflat container and spun up tubesync.
Can “your apps” access it when their device isn’t on your home LAN?
+1 for Walmart Onn, very easy to debloat and degoogle, supports SmartTubeNext, S0undTV (Twitch), Jellyfin, Plex, whatever else you want.
pory@lemmy.worldto Selfhosted@lemmy.world•That's all folks, Plex is starting to charge for sharingEnglish41·2 months agoServer costs? Plex’s serverside only handles auth and verification. Once the client connects to the server, any media is sent peer to peer. There’s no stage where the video goes “to plex” or “from plex”. Saying plex needs to charge a sub fee to make up for bandwidth is like saying qbittorrent should do the same.
Unless you’re talking about the content Plex serves, the ones you have to walk every user of your Plex server through deleting from their apps’ homepage.
pory@lemmy.worldto Selfhosted@lemmy.world•That's all folks, Plex is starting to charge for sharingEnglish71·2 months agoI dunno about that. Plex has lots of market share and plenty of “well I bought the pass when it was $60/$90” people aren’t gonna be personally affected by them locking more and more functionality behind the pass. So they’ll keep using it and recommending it and talking about it, and the centralized account management stuff (which Jellyfin won’t copy, because not having that is the point of selfhosting) will always be more convenient than setting up VPNs or other tools like external auth for Jellyfin sharing over the internet.
Discourse about this everywhere always boils down to the same comment: “I bought the plex pass and honestly I’d do it again for $300 just to not deal with handling my own authentication system, plex remote play Just Works”. Or something like “I refuse to use a $20 HDMI android TV box instead of my ad-ridden smart TV or PlayStation 5, and those don’t have apps for JF”. These guys are literally in this thread, on Lemmy, the Reddit for people so FOSS-friendly they use Lemmy instead of Reddit.
pory@lemmy.worldto Selfhosted@lemmy.world•That's all folks, Plex is starting to charge for sharingEnglish2·2 months agoYes, that is correct. It’s because the people that read the email only, or read the email and click one (1) link, are likely to be less familiar with Plex as a platform than the server owner. Plex the company would very much like people to pay them $7 a month forever for literally nothing.
pory@lemmy.worldto Selfhosted@lemmy.world•That's all folks, Plex is starting to charge for sharingEnglish4·2 months agobut it’s not, because “i got it so cheap for $60 ten years ago / $90 five years ago / $120 yesterday” and “securely opening a port and enabling OAuth for jellyfin takes more than one click”.
The “lifetime” Plex Pass was a genius marketing move, because people are permanently inertia-locked into the cost they sunk. For nearly a decade now the refrain is “I just have a Plex pass. I bought it for $30 less than its current cost and it works great for me, sucks that it’s now $90/$120/$240 but IMO it’s worth it :)”. Don’t forget that making you pay $60 or $90 or $120 or $240 to use your own GPU for hardware encoding was always a scumware tactic, even if they put up a $15/mo subscription next to that one-time cost so that the one-time cost looks like “a good deal”.
pory@lemmy.worldto Selfhosted@lemmy.world•That's all folks, Plex is starting to charge for sharingEnglish6·2 months agoIt’s scummy advertising, yes. Designed to prey on a Plex server operator’s likely-less-tech-literate users.
pory@lemmy.worldto Selfhosted@lemmy.world•That's all folks, Plex is starting to charge for sharingEnglish11·2 months agoYes, they’re being advertised to. In theory this is because they might be clients for non-Pass servers in addition to yours. In practice, Plex could easily verify Plex client accounts that don’t run a server or have access to non-Pass servers and skip sending this marketing email to those accounts. What they’re doing is trying to convince your users they need to pay a sub fee (even though they don’t), because it’s free money in Plex’s pocket if the users do click the thing and say “welp, still cheaper than netflix”
Any users of your plex-pass verified server do not need to pay anything to keep streaming it. You had to pay a lot more for the lifetime or subscription to enable it, but by doing so any users you share with don’t need to pay a dime. You reading this press release and seeing your users get emails and assuming that your users now need to pay for something isn’t you being stupid, it’s the intended result of their deliberately confusing messaging. One user shrugging and saying “guess it’s $7/mo now” is free money for the company.
pory@lemmy.worldto Selfhosted@lemmy.world•Confused about the many ebook/manga management solutionsEnglish1·2 months agoMihon is great right up until you’re trying to read ultra high quality manga with screentones. Mihon doesn’t have modern scaling algorithms, so anything significantly larger than your screen resolution will moiré like crazy.
pory@lemmy.worldto Selfhosted@lemmy.world•Plex is locking remote streaming behind a subscription in AprilEnglish2·3 months ago$20 Walmart Onn 4k. Degoogle it if you want or just slap smarttube and jellyfin/plex on it.
pory@lemmy.worldto Selfhosted@lemmy.world•Plex is locking remote streaming behind a subscription in AprilEnglish2·3 months agoIf you’re leaving Plex because it’s subscribeware, Emby is also subscribeware.
pory@lemmy.worldto Selfhosted@lemmy.world•Plex is locking remote streaming behind a subscription in AprilEnglish81·3 months agoAnd now, that feature costs $240. Suddenly, jumping through hoops to configure Jellyfin’s external SSO plugin becomes a lot more rewarding.
pory@lemmy.worldto Selfhosted@lemmy.world•Discord going public. Plz help a future refugee.English14010·4 months agoit’s Element/Matrix if we’re lucky. Revolt is just another Discord - surely this single company will last! With Element/Matrix being an open protocol, it won’t be a “platform” you have to leave when it goes corporate.
pory@lemmy.worldto Selfhosted@lemmy.world•Random people started sharing child pornography on my matrix server, what are my options?English14·4 months agodeleted by creator
A second device on site is still infinitely more resilient than just letting it rock. Most use cases where a backup would help can be covered by an occasional one way sync or scheduled copy to a USB drive. Offsite is for catastrophes like your home burning down or flooding.