Well I already have jellyfin running in a container, just have to figure out how to get mum’s TV to work with it I guess

<edit> log in on a local IP and not the network name and it’s working again. but I’ll be moving to jellyfin from now

  • TrickDacy@lemmy.world
    link
    fedilink
    English
    arrow-up
    19
    arrow-down
    14
    ·
    7 days ago

    Imo Plex is worth the lifetime pass if you get it on sale.

    All the comments saying Jellyfin is better always puzzle me. I’ve given it like three chances now and each time it feels just as buggy as the last. And that doesn’t even consider the fact that you’ll need more steps to expose it to the Internet for remote viewing or the fact that there’s literally a list of unaddressed security holes https://github.com/jellyfin/jellyfin/issues/5415

    • Strit@lemmy.linuxuserspace.show
      link
      fedilink
      English
      arrow-up
      20
      ·
      7 days ago

      From one of the Jellyfin devs in the issue you linked, posted in April this year:

      Now, let’s address this clearly once and for all. What is possible is unauthenticated streaming. Each item in a Jellyfin library has a UUID generated which is based on a checksum of the file path. So, theoretically, if someone knows your exact media paths, they could calculate the item IDs, and then use that ItemID to initiate an unauthenticated stream of the media. As far as we know this has never actually been seen in the wild. This does not affect anything else - all other configuration/management endpoints are behind user authentication. Is this suboptimal? Yes. Is this a massive red-flag security risk that actively exposes your data to the Internet? No.

      At this point, this over-4-year-old issue has gotten posted to HackerNews more than enough times and gotten quite enough unhelpful peanut-gallery comments like those above… We are limiting this issue to Jellyfin collaborators only at this point. Most of the big items are already tracked elsewhere (specifically, unauth playback) or have already been fixed. And many other options are now open to us in a post-10.11 landscape now that we have a proper library database ready.

        • Strit@lemmy.linuxuserspace.show
          link
          fedilink
          English
          arrow-up
          10
          ·
          7 days ago

          Yes, but it’s always the one people come back too.

          They mention the other issues are either being tracked elsewhere or already solved.

          At the end of the day, it’s a community project, done by primarily volunteers, who is not making any money doing this. No VC funding to hire developers to take care of these issues.

          • TrickDacy@lemmy.world
            link
            fedilink
            English
            arrow-up
            7
            arrow-down
            4
            ·
            7 days ago

            I understand there’s an explanation for it. Doesn’t make these things not things to consider when choosing one’s solution

        • somerandomperson@lemmy.dbzer0.com
          link
          fedilink
          English
          arrow-up
          9
          arrow-down
          3
          ·
          7 days ago

          But it’s FOSS, compared to Plex. And it also does not ask for money for anything.

          You can also add more security yourself if you want to. Not by coding new stuff into jellyfin, but by adding some sort of auth BEFORE jellyfin.

          • Chewy@discuss.tchncs.de
            link
            fedilink
            English
            arrow-up
            2
            ·
            edit-2
            7 days ago

            Setting up auth before Jellyfin breaks clients. This is not an option. Edit: Unless you meant VPN like Tailscale, but then you’d have to install Tailscale too, which I don’t want to explain to others.

            • somerandomperson@lemmy.dbzer0.com
              link
              fedilink
              English
              arrow-up
              1
              ·
              7 days ago

              Tailscale needs you to explicitly add your device to the tailnet, so it’s some form of authentication.

              Also, why don’t you want to explain tailscale? It’s really simple.

                • Chewy@discuss.tchncs.de
                  link
                  fedilink
                  English
                  arrow-up
                  2
                  ·
                  6 days ago

                  And making sure Tailscale auto launches on a FireTV stick is a pita too. Telling them to open Tailscale on each start is not an option.

        • Scrubbles@poptalk.scrubbles.tech
          link
          fedilink
          English
          arrow-up
          2
          arrow-down
          1
          ·
          7 days ago

          Feel free to go read the multiple writeups from the maintainers that go over each one, we don’t need to copy them all here into the comments for you.

    • Onomatopoeia@lemmy.cafe
      link
      fedilink
      English
      arrow-up
      7
      arrow-down
      5
      ·
      edit-2
      7 days ago

      So don’t expose it to the internet - which should be the default stance for anything.

      The internet was (mistakenly and intentionally) built without security - that doesn’t mean we should just accept that, but instead build everything with our own security.

      Numerous mesh VPN solutions exist: Hamachi has been around since at leas 2006. NeoRouter since at least 2012. Then we have Wireguard and Tailscale, and others.

      Business build their own tunnels between locations, using routers/gateways with that capability. Consumer routers from Linksys could do this in 2006.

      There’s zero excuse for running anything exposed to the internet.

      In closing NO SOFTWARE is free of bugs. With Plex you get to pay for those bugs and still have software that depends on a connection even though you’re hosting and viewing your own media, locally.

      You wanna denigrate Jellyfin, at least be honest about the pros/cons between the different solutions.

      • TrickDacy@lemmy.world
        link
        fedilink
        English
        arrow-up
        10
        arrow-down
        5
        ·
        7 days ago

        So don’t expose it to the internet

        No

        Thwres zero excuse for running anything exposed to the internet.

        …except this entire thread is based on a use case for it

        With Plex you get to pay for those bugs and still have software that depends on a connection even though you’re hosting and viewing your own media, locally.

        You’re condescending dude. I wouldn’t be using Plex if I didn’t understand like 37 things you’re implying I don’t understand here. I paid for it once, it was a good value for me, and I find it pretty weird that you apparently want to admonish me for that. If you want to use jellyfin have at it. I found it buggy to the point of barely being usable. Just sharing that experience and I don’t need anyone to agree with that.

          • TrickDacy@lemmy.world
            link
            fedilink
            English
            arrow-up
            1
            ·
            edit-2
            6 days ago

            Are you advocating for an self hosting to only exist locally? Or are you advocating for hosting everything on corporate servers?

            • Possibly linux@lemmy.zip
              link
              fedilink
              English
              arrow-up
              1
              arrow-down
              1
              ·
              6 days ago

              Don’t expose things to the internet

              That goes for corporate settings as well as personal stuff. You almost certainly do not need your self hosted services to be publicly accessible by bots. Anything on the internet gets pounded.

              • TrickDacy@lemmy.world
                link
                fedilink
                English
                arrow-up
                2
                arrow-down
                1
                ·
                edit-2
                6 days ago

                … You just literally said hosting shouldn’t exist. You are using the Internet right now.

                Also pretty weird to keep phrasing this as a command, discounting an entire class of use cases to be invalid because bad actors exist?

        • AbidanYre@lemmy.world
          link
          fedilink
          English
          arrow-up
          1
          arrow-down
          2
          ·
          7 days ago

          …except this entire thread is based on a use case for it

          Except it’s not. OP is trying to watch stuff on his own network.

        • non_burglar@lemmy.world
          link
          fedilink
          English
          arrow-up
          1
          arrow-down
          1
          ·
          7 days ago

          The problems with Plex are not technical. The problems from Plex are that they take away features and change the terms of use to the detriment of the user. Given plex’s pricing changes over the last year, I would be concerned that your lifetime pass be affected by some policy change.

          • TrickDacy@lemmy.world
            link
            fedilink
            English
            arrow-up
            5
            ·
            7 days ago

            Yes, they changed the free featureset, and afaik those changes were fair. Providing a tunnel for remote streaming for free doesn’t seem like a good business plan. I mean, yeah they could always back out of the promise of what a lifetime pass is, and if they do I will find a new solution and hope they’re sued for it.

            If they do back out of their lifetime commitment, I suspect that would drive some other similar apps to get better. Maybe I would even learn to live with jellyfin as it currently exists in that situation. But so far I don’t see a reason to, and that would almost have been true if I never paid for plex.

            • non_burglar@lemmy.world
              link
              fedilink
              English
              arrow-up
              1
              ·
              7 days ago

              Fair enough.

              I’m speaking from both sides here, having used Plex for years and now jellyfin:

              Don’t tie technical competence of a product with its monetary cost. They are not necessarily equivalent.

              • TrickDacy@lemmy.world
                link
                fedilink
                English
                arrow-up
                1
                ·
                7 days ago

                I didn’t realize I did that. Given that my opinion on OSes is that “the larger the budget, the shittier it is”, I don’t knowingly do what you’re suggesting here. Linux over windows and macOS any day.