Collection of potential security issues in Jellyfin This is a non exhaustive list of potential security issues found in Jellyfin. Some of these might cause controversy. Some of these are design fla…

  • anarchiddy@lemmy.dbzer0.com
    link
    fedilink
    English
    arrow-up
    40
    ·
    1 day ago

    I’m not sure who needs to hear this, but unless you work as a security engineer or in another security-focused tech field, you really shouldn’t be exposing your homelab to the open internet anyway

    Most people access their homelabs via VPN - i don’t see anything here that’s a problem for that use-case.

    • jagged_circle@feddit.nl
      link
      fedilink
      English
      arrow-up
      3
      ·
      18 hours ago

      I need to run a VPN already. Fine for desktop, but this isn’t a solution for mobile (where you can’t run two VPNs simultaneously)

      • Hareen@social.ookami.space
        link
        fedilink
        arrow-up
        10
        ·
        18 hours ago

        @jagged_circle @anarchiddy

        It’s actually possible to run 2 VPNs simultaneously on mobile using RethinkDNS which is an app available on F-Droid. For example I’m currently connected to MullvadVPN and my home network at the same time using two WireGuard configs.

        • jagged_circle@feddit.nl
          link
          fedilink
          English
          arrow-up
          2
          ·
          edit-2
          12 hours ago

          Can you order the wireguard connections?

          Eg I want my connections to my home server VPN to first go through my mullvad VPN. Because I dont want any connections coming out of my device that don’t go through a shared VPN or Tor.