• 1 Post
  • 12 Comments
Joined 2 years ago
cake
Cake day: July 6th, 2023

help-circle
  • I’m not sure if you know this, but…that doesn’t fix most of the security issues in the linked list. All the reverse proxy does is handle hostname resolution and TLS termination (if you are using TLS). If the application being proxies still has an unauthenticated API, anyone can access it. If there’s an RCE vulnerability in any of them, you might get hacked.

    I run Jellyfin publicly, but I do it behind a separate, locked-down reverse proxy (e.g., it explicitly hangs up any request for a Host header other than Jellyfin’s), in a kubernetes cluster, and I keep its pod isolated in its own namespace with restricted access to everything local except to my library via read-only NFS volumes hosted on a separate TrueNAS box. If there is any hack, all they get access to is a container that can read my media files. Even that kind of bothers me, honestly.

    The overwhelming majority of Jellyfin users do not take precautions like this and are likely pretty vulnerable. Plex has a security team to address vulnerabilities when they happen, so those users would likely be a lot safer. I appreciate the love for FOSS on Lemmy, but it is scary how little most folks here acknowledge the tradeoffs they are making.





  • This will affect any server that does not already have a Plex Pass/ Lifetime Plex Pass. If your server does not have one, your remote users will have to pay. The service Plex provides is still worth it though, it largely just works on dozens of platforms and that shit isn’t free to make.

    Sharing a Jellyfin server with others remotely is still a lot more complicated than it needs to be to compete (no, it’s not as simple as opening a port, and if you think so then you’re either lucky or you aren’t sharing with lots of folks). I run both and I would never try to share Jellyfin with non-technical people. Honestly, I wish Jellyfin would start offering an optional paid relay service to fund their development. They could use the revenue to improve their app ecosystem and still produce mostly open-source software. Homeassistant does this with Nabu Casa and it’s great!

    That being said, the new Plex Android app kinda sucks ass. If there was anything that would make me switch it wouldn’t be having to pay for software, or services it’d be a garbage experience on my most common platform.


  • The performance of hardware acceleration in Jellyfin is markedly worse in my experience. My A380 can handle 2-3x more streams in Plex than it can in Jellyfin. My theory is that it’s the jellyfin ffmpeg port slowing things down, but I admittedly don’t have much evidence to back that up beyond the fact that Plex’s transcoder is built on ffmpeg as well.

    Plex Relays are a feature, but that’s sort of the point. You get that stability from Plex by default and it works on all clients. There is no realistic way you’re going to get all remote client devices on a VPN for Jellyfin. Maybe one day Jellyfin can offer that as a paid option, a la Nabu Casa for Homeassistant.

    Media servers tend to get shared around with friends and family and these edges will start to drive you nuts if you have more than a handful of users. I do not want to try to walk a family member through setting up a VPN on their smart TV.




  • There’s a really strong bias on Lemmy for OSS projects. I’m glad they get so much love here, but everything people say here about Jellyfin has to be taken with a huge grain of salt. It works and you can use it. Depending on your needs, it may even work perfectly for you. There are tons of rough edges though.

    Here’s a few:

    • A bunch of basic functionality most people are used to is missing by default. You can get things like intro detection and subtitle downloading to work with plugins, but you have to work at it.
    • Hardware acceleration still kind of sucks. You can get it to work, but the Jellyfin port of ffmpeg doesn’t work anywhere near as well as Plex’s.
    • The variety in app experience is bewildering sometimes. Apps look and feel very different between platforms.
    • Android TV app support sucks. The app is difficult to navigate and has a bunch of weird edges, like subtitle defaults not working. I have no idea what OP is talking about here, it sounds like they’re only judging the app on its animation speed.
    • Public network support is finicky. This is hard to quantify, but I’ve been on several remote networks where my Jellyfin connection dropped in and out and Plex did not. I suspect this is due to the Plex Relay service making up for bad routes between my house and the network.

    Jellyfin is improving all the time, and I hope the recent EFCore update improves performance and development velocity. I’m also holding out hope it will eventually lead to externally hosted databases and active-active servers.

    Disclaimer: I run Plex and Jellyfin and regularly check in on the state of things in Jellyfin. I donate to Jellyfin. I want Jellyfin to be better than Plex. I don’t think any objective measure bears this out yet.



  • I’m sure there are plenty of Israelis that want to do this even if they won’t admit it to themselves but this isn’t the final anything. The IDF has killed around 37,000 Palestinians out of ~2.3 million. That’s horrible but nowhere near the “barely any left” stage.

    A genocide on the scale of millions takes industrial effort to accomplish. I’m not saying it couldn’t happen, but given Israel’s reliance on foreign aid, current industrial capacity, and political position, it seems unlikely. My guess is Israel will take some more territory and the conflict (kinda tough to call the IDF bombing almost exclusively civilians a war) will peter out. Foreign aid will be allowed back in and Israel will put its mask back on.

    Personally, I don’t see how this doesn’t end with half the middle east actively going to war with Israel if they don’t stop soon. The only thing really keeping them safe is the US, and Israel has burned a lot of political capital here. Their leaders are awful, power-hungry shits, but they’re not stupid. If they don’t try to rebuild some of that capital, there’s every chance that Israel loses its lifeline.

    What comes years after things die down, I don’t know. Gazan sentiment towards Israel was already overwhelmingly negative before this, but the IDF has never done anything on this scale before. I don’t think Israel can allow Gaza any type of self-governance for decades after this. This is beyond even post-WW2 Japan levels of destruction, and unlike Japan every nation around them is still on their side.


  • In reading this thread, I get the sense that some people don’t (or can’t) separate gameplay and story. Saying, “this is a great game” to me has nothing to do with the story; the way a game plays can exist entirely outside a story. The two can work together well and create a fantastic experience, but “game” seems like it ought to refer to the thing you do since, you know, you’re playing it.

    My personal favorite example of this is Outer Wilds. The thing you played was a platformer puzzle game and it was executed very well. The story drove the gameplay perfectly and was a fantastic mystery you solved as you played. As an experience, it was about perfect to me; the gameplay was fun and the story made everything you did meaningful.

    I loved the story of TLoU and was thrilled when HBO adapted it. Honestly, it’s hard to imagine anyone enjoying the thing TLoU had you do separately from the story it was telling. It was basically “walk here, press X” most of the time with some brief interludes of clunky shooting and quicktime events.

    I get the gameplay making the story more immersive, but there’s no reason the gameplay shouldn’t be judged on its own merit separately from the story.