ReversalHatchery @ ReversalHatchery @beehaw.org

Computers and the internet gave you freedom. Trusted Computing would take y

---

Read more

Posts

3

Comments

2,019

Joined

2 yr. ago

my impression was that people either just put a graphics card in their server, or run jellyfin from the desktop/laptop

That said, I'm a firm believer that doing GUIs through code is an inefficient, cumbersome, and antiquated process that should be replaced with more visual alternatives

what do you mean? I'm not familiar with Godot.

Android comes to mind where most commonly you build the UI in XML. what do you think about that?

Your smart TV is (presumably) on your local network

often, but not always. sometimes the TV is at a different house, when you are a guest or at a second property

I think we're pretty far from that being a problem

oh, in your firewall. I think I can count the percents on one hand about how much of jellyfin users run a firewall applience besides it

I'm not exposing jellyfin, but for sure I wouldn't let my plex server even see the internet (I bet iy wouldn't even work that way).

jellyfin is perfectly accessible everywhere it needs to be. been using a VPN on my phone for ages for all traffic.

thanks but no. I like my privacy more

is that a feature in Jellyfin? and since when do all ISP subscribers have names in DNS?

but if you take normal precautions (i.e. don’t run this next to your classified information storage)

oh yeah I'm pretty sure the majority of users bought a dedicated machine for Jellyfin

wireguard has been going fine here for 5+ years. only problems were when that garbage raspberry crashed as it always does (but that's an issue with the hardware) and when the IP changes, but that's mitigated by dynamic DNS

aaaand now you smart tv can't connect. none of them. the clients dont even support http basic auth creds put into the URL for some crazy reason.

for advanced HTTP-level authentication you would need to run a reverse proxy on the TV's network that would add the authentication info. for the VPN idea you would need to tunnel the TV's network's internet connection at the router. or set up a gateway address in the TVs network settings that would do that. or use a reverse proxy here too so that it repeats the request to the real server.

but honestly, this is the real and only secure way anyway. I wouldn't be comfortable to expose jellyfin even if the devs are real experts. I mean vulns get discovered, in dotnet, jellyfin dependencies, linux filesystem, and reverse proxy, and honestly who has time to always tightly keep up to date with all that.

that's not to discount the seriousness of the issue though, it's a real shame that jellyfin is so much against security

I remember when they were arguing that you don't need a VPN or proxy basic authentication in front of it because their team knows how to write secure code...

yeah and also my impression was that it kind of talks about the horrors mass surveillance brings and tries to spread awareness. I was disappointed when my favorite streamer, a Cory Doctorow reader and someone who has a crossed out surveillance camera as their steam profile pic, was just bitching about how it runs and some of the bugs it had, while saying nothing about the story. But at the same time it was kind of expected, they live off of google (youtube) and amazon (twitch) money for a long time now..

their service is very cheap, though. but yeah if you can selfhost it, and expose it to family that's good

what problems did you experience, on what hardware? works fine here

yeah, that's nextcloud. but how do they input data? I guess its touch based, but is it a touch screen with on-screen keyboard (an android tablet with a web browser could replace that) or do they use a pen, or voice, or something else?

now that I look into it other phones of theirs are interesting too. I mean 3" with jack and IR, and still a lot of memory.

unfortunate that o far none of them have clean rom support

writer:

Anita Key Government Liaison

lol

even that is questionable professionally

nextcloud comes to mind, but don't know what alexa show is