makeitwonderful @ makeitwonderful @lemmy.sdf.org

Posts

1

Comments

28

Joined

10 mo. ago

You can't have a dialogue or discussion with a search engine. Getting an answer is a use for asking a question but not all possible uses.

Maybe the way you feel has about this is because there are countless options for places to leave this advice for other people but you decided to put it in a thread where OP is obviously struggling and already past the point where the advice would apply? Dude is in serious need of some urgent empathy and he gets this this tut-tuting combined with making an example of him for the class or something.

Your comment got me looking through the jellyfin github issues. Are the bugs listed for unauthenticated endpoints what you're referencing? It looks like the 7 open mention being able to view information about the jellyfin instance or view the media itself. But this is just what was commented as possible, there could be more possibilities especially if combined with other vulnerabilities.

Now realizing there are parts of Jellyfin that are known to be accessible without authentication, I'm thinking Fail2ban is going to do less but unless there are ways to do injection with the known bugs/a new 0day they will still need to brute force a password to be able to make changes. I'm curious if there is anything I'm overlooking.

It feels like everything is a tradeoff and I think a setup like this reduces the complexity for people you share with.

If you added fail2ban along with alert email/notifications you could have a chance to react if you were ever targeted for a brute force attempt. Jellyfin docs talk about setting this up for anyone interested.

Blocking IP segments based on geography of countries you don't expect connections from adds the cost of a VPN for malicious actors in those areas.

Giving Jellyfin its own VLAN on your network could help limit exposure to your other services and devices if you experience a 0day or are otherwise compromised.

I think so as well.

https://f-droid.org/packages/com.unciv.app/

If you knew someone else was having the same experience as you, would you feel hate for them when they're not able to get their shit done? If the answer is no then maybe knowing that can help relieve some of the self hate you're feeling over your circumstances.

I suspect you may even feel inclined to provide empathy and support for the person having the same experiences as you. If that's true, then you know people having your experience deserve empathy and support. You're one of the people having those experiences so you're deserving of the same as others!

Mike Love performing Permanent Holiday

I've had a lot of fun with the content they added for Into the Breach.