The main issue there isn’t the fact that these issues exist. The problem is the Jellyfin devs attitude towards them, most of these problems have been known for years (more than five in some cases) but are largely ignored. Client compatibility is valued over everything else.
There have been plenty of suggestions, ideas and even PRs, but the devs priorities don’t allow for any security centered patches to get merged
Beside the various security holes that have been ignored for years by the devs?
As open as the servers “security”
Was there a DOA that wasn’t chicks playing Volleyball? I heard they invented entirely new boob physic simulations for that one
Technically, yes. Gameplay wise it’s stale. A 7 would be kind, a 10 is simply an admission of guilt.
Yeah, obviously. But if they would just all criticize companies for only giving keys to simps, that would atop rather quickly. Cause the alternative would be that no one is talking about your game
Lol, 81 average - 77% recommended
Gaming journalism has really lost all credibility. A fucking 10/10 from TheSixthAxis. For this pile of shit. Even if you’re a hardcore pokemon fan, as a journalist you can’t just ignore the issues. No wonder GameFreak feels no need to do better when they all lap it up like honey, no matter what they release
beautifully shows what city life is like in the Pokémon universe
With flat ugly buildings? With textures that literally cut windows in half when they meet a corner? With people/pokemon popping up 10m in front of you?
Its the torment nexus all over again
Can I just say, I love that little round gif at the end. That look so cool
What’s your issue with paperless? Assuming its PaperlessNGX it shouldn’t be more than a simple compose
I still hold a .de domain for 12€/year
Aaaah, didn’t see that text
Ok, I’m gonna need an explanation for this one. What happens after he used the scale function?
Haha, the lawyer just went NOPE after Louis answer
Still better to have a team to react to this incident than just have them shrug and ignore it for 5 years
No, the worst is that a company like Sony or their lawyers can find my server and create a list of movies I offer and then sue me over it. I live in a country where lawyers make a living doing nothing but that.
Besides that, security by obscurity is the worst possible form and barely qualifies as security at all. It’s also another place where the Jellyfin devs leave their users to their own devices when it comes to securing the server against malicious actors.
And none of this is clearly communicated by the project. The unauthenticated endpoints are not disclosed, the issues with the filepath is not disclosed. Jellyfin fans treat it as a drop in replacement for Plex, but people using it as such basically throw an unauthenticated server onto the open web
That’s simply not true. You can just set your local ip range as unauthenticated and use it to your hearts content without an internet connection.
There are ways to fix these issues while preserving legacy client support. And honestly I don’t see how changing their database mess would help in solving security issues. In the end they’ll have to change their API to a more secure one, which will definitely disrupt client support for future updates