Something is awfully weird here, because Linux literally runs the worlds infrastructure for the internet. It is not unstable by any stretch of the imagination. Something you’re doing between all distros has got to be the culprit - something you do differently than other people.
And again - if you put those behind a fail2ban; and you 404 5x in an hour, which is likely - you’ve solved that issue. Had my jellyfin instance publicly available for 2 years on its own VM with passthrough GPU, and haven’t had any issues. People poke around quite often, and get blackholed via the firewall for 30d.
It wouldn’t stop a dedicated attacker, but I doubt anyone’s threat model here is that intense. Most compromised servers happen from automated attacks probing for vulnerabilities in order to get RCE; not probing for what movies you have – Because having movies on a media server doesn’t prove that you didn’t rip them all off of blu-ray…it just means you have movies.
You’re not going to have 100% privacy when you put up ANY service on your network. Everything leaves a trace somehow; but I’m starting to think half of you are Chinese spies or something with the amount of paranoia people here show sometimes. :P
Hmm, that’s a good point. I just checked my Jellyfin, and I don’t put any of the cert data into its config, I’m using caddy as my reverse proxy to serve it and I didn’t even think about this. No reason it has to be a self-signed cert, it could technically be local only and still be a Let’s Encrypt cert.
If they need SSL certs, they’ve got to. Jellyfin doesn’t accept self-signed certs, which means DNS entries in a domain, and access from the internet.
Really, honestly - what they need to do is just install Jellyfin on the Raspberry Pi and ditch the encryption requirement altogether. There’s no reason to have it on a LAN-only environment. They aren’t going to need it, nobody is going to MITM their lan environment, and VPNs will regularly allow LAN passthrough.
If ProntonVPNs own client doesn’t allow LAN connections, they either need to swap to the Wireguard vanilla client (if that’s allowed on free tier), or upgrade their VPN service.
OR switch VPNs altogether.
There isn’t a way to do this without breaking one of their requirements
Only options here are to publicly host with real SSL certs, on a domain and tunnel out – Or swap VPN providers/software so that you can achieve LAN access and forego HTTPS altogether.
Edit: And sorry – the previous post is gone regarding their only needing access within the home, there’s no way I could have known that.
There’s a bit of paranoia going on here to begin with - There’s no reason they need this level of “security” within their home network on the LAN side anyhow. They could possibly buy a managed switch and make the jellyfin server only visible to a specific vlan that didn’t include the router, but that doesn’t quite match up with what it sounds like they’re needing.
Yeah, this whole thread feels like a “but I can’t do that, work around it for me”
Do. And make sure your logs are piped through fail2ban.
All of these “vulnerabilities”, require already having knowledge of the ItemIDs, and anyone without it poking around will get banned.
The rest of them require a user be authenticated, but allows horizontal information gathering. These are not RCEs or anything serious. The ones which allowed cross-user information editing have been fixed.
Tailscale is only for the server/host. You’re not changing all of your VPN services over to this, you’re using it in a ‘reverse’ fashion. You’re VPN-ing the server out to the world so it’s reachable and you have port forwarding options, etc.
From there, it can be reached by any client on the internet as a service. From there though, I don’t know how you’d get to it securely without a domain and SSL (Let’s Encrypt/Caddy) certs.
A domain is only like $16/year. So it’s not prohibitively expensive.
Yeah, I probably should look at quitting and starting the business under my own LLC and running it local to me. I repair 3D printers for a living, and there’s only like 5 places in the US that do so. So finding work closer to home isn’t an option, but moving the work closer to home could suffice. I’ve certainly been mulling it over.
But I also love driving, so there’s that too :D
I live a good 40 minute drive to work; there is no way I could possibly bike to work. If I lived in Europe where everyone’s cramped like a can of sardines, sure. But things are just too far apart here.
Depends if they sold, where they sold, and a bunch of other factors.
How about uh…stop using social media? I barely ever touch my smartphone, I only use it for E2E encrypted messaging apps, email, and maybe the occasional phone call.
You don’t need to get rid of the phone to do this shit.
That isn’t how genetics work and it isn’t how intelligence works.
On a simplified level, it absolutely is. If having more kids gives an evolutionary advantage, and being unintelligent is part of that caste, then absolutely the children will be born with a lower capacity for intelligence.
Look at Huskeys vs other dogs. Massive, MASSIVE difference in personality, intelligence, energy, etc.
And they aren’t a different species either - it takes fractions of a % of difference in DNA to produce huge swings in things like intelligence.
If we share something like 90% of our DNA with monkeys, it’s not going to take an entire speciation to measure intelligence differences. This is a lie told by people who pretend to be scientists, but are more interested in the moral implications of confirming than they are truth and facts. Yes, telling people you can control the genetic population of the species to push for certain outcomes within the species in a dangerous thing. We get that. But that is the truth of the matter, not some fairy-tale that we’re all kumbyah and that every genetically distinct population doesn’t have advantages and disadvantages (of which there are hundreds or thousands of distinct genetic populations within the h. sapien species; If you’re a pacific islander, a DNA test can tell you exactly what island you originate from).
Sure, on an individual level - people as single data-points can fall upon that distribution, but you absolutely can shift that distribution up or down.
Granted, doing genetic control like this comes with its own incredibly dangerous set of consequences such as amplification of mutant genome, because you would be controlling for 1 trait, but missing the other millions of traits/genetic markers that you need to keep diverse in order to keep the human body working. – Again, using dogs as a reference here, how most dalmations have hearing problems or are completely deaf because when their line was bred, they were controlling for the patterning, not other genetic defects.
If we bred for it, we could make it happen. That’s the point.
Also, it isn’t unscientific. They’ve done it in rat/mouse studies. Look up mouse utopia. We aren’t immune to social collapse. As a species we aren’t that smart to begin with. It’s our social structure, public schooling, etc that allow us to advance early age and maintain the higher order thought that our society continues to have. When shit goes sideways, kids don’t have public schools any more, etc – you’ll see how stupid genetically, we all are.
I have friends, who are legitimately “mentally stunted” because they weren’t taught language due to a neglective environment.
TV shows almost look like OW MY BALLS today; with newer smart TVs injecting ads into content that isn’t even theirs.
We’ve got a president doing McDonalds buffets for events, suggesting people “inject light” into their veins for medical intervention, wanting to rename greenland to “Red White and Blueland”…
Nah. That shit hits far too close to home.
And if other animals can be bred for specific traits, so can humans. We’re not special in any way regarding that. Rejecting that because of how it was incorrectly used to justify horrible things in the past is flat out unscientific.
Idiocracy. We’re basically dumping brawndo on the plants as we speak…
I’ve only ever done those speeds on a VERY clear interstate highway with little to no traffic, in my dumbass teenage years - honestly it’s a miracle I didn’t get myself killed; looking back it was absolutely irresponsible, but damn it was fun :D
That’s about 40mph faster than I’ve ever driven, and even in a sports car it gets squirrely VERY fast at those speeds. Holy shit.
Me too. Probably agree on most things.
32% of America own guns. So right off the bat that 72% number is wrong.
44% live in a household with a gun.
Other than the gun shit, I agree with most of this.
I want legalized Marijuana for example, but I want harsher penalties for its use in public; especially its smell.
This some fox-news level clipped bullshit that takes things severely out of context.