The update got released over 2 months ago. So sensible admins should not be getting hit by this.

Also I use Jellyfin btw.

  • frongt@lemmy.zip
    link
    fedilink
    English
    arrow-up
    0
    arrow-down
    1
    ·
    12 days ago

    I’m guessing this requires it be exposed to the Internet. Please stop exposing services to the Internet.

    • sanpo@sopuli.xyz
      link
      fedilink
      English
      arrow-up
      0
      ·
      12 days ago

      That’s pretty much the number one reason people say they won’t move to Jellyfin - the ease of public access.

      Even though exposing your shit to Internet is a terrible idea for most people.

      • Auli@lemmy.ca
        link
        fedilink
        English
        arrow-up
        0
        ·
        12 days ago

        I think people over blow how dangerous it is. Or maybe its better most people dont. I don’t know I know the issues and I take measures to mitigate them. Then if someone gets in they would be limited to vlan. And if somebody gets out of that good wasted so much effort for nothing since I have nothing that would be worth that much trouble.

        And before someone says identity pretty sire that has been in so many other leaks overt the years the information is pretty old.

        • frongt@lemmy.zip
          link
          fedilink
          English
          arrow-up
          0
          arrow-down
          1
          ·
          12 days ago

          Even without data compromise or pivoting, they can still mine crypto on your hardware, launch a ddos, spam email, do botnet stuff, or host CSAM.