Collection of potential security issues in Jellyfin This is a non exhaustive list of potential security issues found in Jellyfin. Some of these might cause controversy. Some of these are design fla…

  • Saik0@lemmy.saik0.com
    link
    fedilink
    English
    arrow-up
    17
    ·
    edit-2
    23 hours ago

    With unrestricted signups, they can obtain their own account easily. With their own account they can enumerate all your other users.

    If they have their own account they can just find your instance, make a login, collect all the proof they need that you’re hosting content you don’t own (illegally own) then serve you a court summons and ruin your life.

    I wouldn’t worry about the vulnerability in the link since your already wide open. But I wouldn’t leave Jellyfin wide open either. Movie and TV studios are quite litigious.

    I hope you’re at least gatekeeping behind a vpn or something.

    Edit: typo

      • Saik0@lemmy.saik0.com
        link
        fedilink
        English
        arrow-up
        5
        ·
        1 day ago

        I mean, sure… but you’d actually have to reasonably liquidate most of your assets at that point. You can’t just “claim” bankruptcy and do literally nothing to sate your debts. Of course this is different on a jurisdictional basis… but overall, you have to sell a lot of your stuff in order to do a proper bankruptcy.

        https://www.financestrategists.com/financial-advisor/bankruptcy/what-can-you-keep-after-filing-bankruptcy

        It can decimate any savings you have for retirement.

          • jarfil@beehaw.org
            link
            fedilink
            arrow-up
            1
            ·
            2 hours ago

            Depending on where you live, it can be up to “all and anything that you may come into direct or indirect ownership of, for the following x years”. Get a job? No salary for you. Want to drive a car? Can’t have insurance on a car that’s not yours. Inheritance? Nope. Get married? Now half of your spouse’s salary is gone. And so on.

            You better hire a good lawyer if you want to declare bankruptcy… and how are you going to pay them?

          • Saik0@lemmy.saik0.com
            link
            fedilink
            English
            arrow-up
            3
            ·
            23 hours ago

            Fair enough if you don’t actually have any… but the courts will still make that decision for you. Some things might count that you don’t expect.