RetroFed Forums
Your home away from modern life.
Plex vulnerabilities being exploited in the wild to drop a cryptominer
Post Reply
AuthorMessage
DonutsRMeh lemmy.world DonutsRMeh@lemmy.world
Joined: 2025-03-13
#102 · Quote Reply

Some paid for lifetime and enjoy it. Or prefer the layout. Or prefer the easier sharing if data with family and friends. There are still reasons to run Plex over Jellyfin for some, but not many of they keep going the way they are.

Understandable, but like I told the other person in another comment. Setting jellyfin on a friend’s device is as easy as setting up plex if you get a domain name. I have one from cloudflare that I pay $10 a month for. I create the user account on my end and only give my friend the server address and login

-2
DonutsRMeh lemmy.world DonutsRMeh@lemmy.world
Joined: 2025-03-13
#103 · Quote Reply

Because Jellyfin is an ugly, duct-taped-together mess. It’s very utilitarian at best, when everything is working. Ease of use is just not there for your non-technical friends and family. Invariably whenever you bring any of these issues up, people will come out of the woodwork and tell you “Oh you just have to bolt this thing on or use it in this one specific unintended way in order to get it w...

That’s subjective. I’ve never had an issue with it, neither has my wife or son or the couple of friends who use my media.

-1
nullspace lemmy.world nullspace@lemmy.world
Joined: 2026-06-05
#104 · Quote Reply

Someone please educate me, in case I’m missing something. Is there an excuse left why people use plex, not jellyfin? It’s now basically on every platform and even supports music and audiobooks.

It just werks.

5
Bronzie sh.itjust.works Bronzie@sh.itjust.works
Joined: 2023-06-09
#105 · Quote Reply

Understandable, but like I told the other person in another comment. Setting jellyfin on a friend’s device is as easy as setting up plex if you get a domain name. I have one from cloudflare that I pay $10 a month for. I create the user account on my end and only give my friend the server address and login

Sure, but I’ll use myself as an example: I don’t want any of my services exposed to the internet, so Tailscale/Netbird/other Wireguard solution is the best choice.
Some family members have their TV’s online with no Tailscale or media box, so that solution is out.

Sure I could route all their Jellyfin traffic to my me via an exit node or VPN, but then we’re way deeper into this than my 60-something mother would ever want to. And I am on the hook for both her and my uptime. So phone/tablet/PC only if they don’t want a streaming device with native support.

The built in functionality on Plex is really practical, and practical is good for us creatures of comfort.

So I’m not disagreeing with you, just explaining what edge Plex still has over JF.

(And yes, I could do what you do and run with Cloudflare, but I don’t want to pay for it and I don’t want any traffic via third party I don’t trust)

5
NewNewAugustEast lemmy.zip NewNewAugustEast@lemmy.zip
Joined: 2025-06-19
#106 · Quote Reply

Grow up a little, btw.

That's the spirit!

2
tko tkohhh.social tko@tkohhh.social
Joined: 2023-06-27
#107 · (edited) Quote Reply

That’s subjective. I’ve never had an issue with it, neither has my wife or son or the couple of friends who use my media.

Of course it's subjective, but it was you who asked why people continue to use Plex. This is a reason, and the reason is valid whether you share the same experience or not.

4
Encrypt-Keeper lemmy.world EncryptKeeper@lemmy.world
Joined: 2023-07-03
#108 · (edited) Quote Reply

That’s subjective. I’ve never had an issue with it, neither has my wife or son or the couple of friends who use my media.

I wouldn’t call it subjective. The issues that it has are all objectively there, whether or not you’re bothered by them is what’s subjective. If you’re personally ok with all the quirks, bugs, missing features and general lack of polish that plague Jellyfin but not Plex more power to you. But those problems exist regardless, and they are the answer to the question you asked.

4
bwrsandman lemmy.world bwrsandman@lemmy.world
Joined: 2023-06-10
#109 · Quote Reply

Someone please educate me, in case I’m missing something. Is there an excuse left why people use plex, not jellyfin? It’s now basically on every platform and even supports music and audiobooks.

I have Plex and Jellyfin but if I want to watch on my PS5, Plex has an official media app on there that's really convenient to use.

2
Blue_Morpho lemmy.world Blue_Morpho@lemmy.world
Joined: 2023-11-14
#110 · Quote Reply

First it's a VM because I'm not going mess around with stuff on bare metal. Containerisation method doesn't matter, the point is to have an untrusted container (VM, thin container, LXC, whatever) that a process cannot exit, has no root user rights, and can be limited externally for what resources it sees. The entire point is to be able to say "here's your config folder where you can write shit,...

Jellyfin but you not being able to follow a dead simple guide.

The fact that others had the same problem without solution means it isn't follow a dead simple guide. There are multiple guides. Just setting up docker means you have to already know to not use it and run podman. Because if you follow the online guides on docker's own website, you end up with a docker gui and their AI assistant installed.

And to think you were running a whole ass ISP...

You are arguing that setting up an Internet server is as simple as it was 30 years ago. You are arguing for the sake of arguing.

1
fonix232 fedia.io fonix232@fedia.io
Joined: 2023-06-13
#111 · Quote Reply

Jellyfin but you not being able to follow a dead simple guide. The fact that others had the same problem without solution means it isn't follow a dead simple guide. There are multiple guides. Just setting up docker means you have to already know to not use it and run podman. Because if you follow the online guides on docker's own website, you end up with a docker gui and their AI assistant inst...

What the fuck are you on about?

  1. Docker doesn't require podman at all
  2. Learning the basics of Docker isn't that complex. Certainly isn't as complex as learning how to run VMs on a dedicated headless server.
  3. If you look up "install docker", the first hit is, 9 out of 10 times, Docker Engine. NOT the desktop app...
  4. No, I am aguing that if you were capable of setting up Cisco BGPs in the mid-90s, when documentation was ass, network gear management was ass, and you didn't have forums and Reddit and Wikipedia and websites hosting manuals, tech blogs and guides and so on.... Then setting up Jellyfin, which is a fraction of the complexity of your job 30 years ago, should be straightforward. I am arguing that if you were capable of configuring complex services and devices 30 years ago, then today, with a million times more information readily available at your fingertips, you should be able to set up a simple service.
0
lokalhorst feddit.org lokalhorst@feddit.org
Joined: 2026-04-25
#112 · (edited) Quote Reply

Because Jellyfin is an ugly, duct-taped-together mess. It’s very utilitarian at best, when everything is working. Ease of use is just not there for your non-technical friends and family. Invariably whenever you bring any of these issues up, people will come out of the woodwork and tell you “Oh you just have to bolt this thing on or use it in this one specific unintended way in order to get it w...

Not that I want to disagree with you, and I have never used Plex. But I was shocked how polished and easy Jellyfin is for an open source project when I used it the first time. It feels like a very mature piece of software to me. My gf really loves it, too.

I agree setting up tailscale for remote access was a bit of a learning curve though.

-1
Encrypt-Keeper lemmy.world EncryptKeeper@lemmy.world
Joined: 2023-07-03
#113 · (edited) Quote Reply

Not that I want to disagree with you, and I have never used Plex. But I was shocked how polished and easy Jellyfin is for an open source project when I used it the first time. It feels like a very mature piece of software to me. My gf really loves it, too. I agree setting up tailscale for remote access was a bit of a learning curve though.

If you think there’s anything polished about Jellyfin there’s a whole world of open source projects out there for you to discover. The world is your oyster.

It definitely isn’t mature by any measure. It’s been stuck in the process of fixing technical debt and poor design decisions from the project it was forked from for years now and still isn’t finished, though they’ve made some progress in the last couple years. But I’m not sure if they are going to keep the momentum up since several lead maintainers have left the project recently. Jellyfin still hasn’t figured out table stakes features like native intro and credit skipping, OIDC support, etc. There are some devastating bugs that having been around more most of its lifetime too. One they fixed like a month ago was if Jellyfin couldn’t access your media files for even a short period of time, it would delete all media from your playlists and you’d have to recreate them one one.

2
lokalhorst feddit.org lokalhorst@feddit.org
Joined: 2026-04-25
#114 · Quote Reply

If you think there’s anything polished about Jellyfin there’s a whole world of open source projects out there for you to discover. The world is your oyster. It definitely isn’t mature by any measure. It’s been stuck in the process of fixing technical debt and poor design decisions from the project it was forked from for years now and still isn’t finished, though they’ve made some progress in th...

I don't think that is how it works. I don't necessarily need a reference to tell something is a good or a bad product. I have never said that Jellyfin is more polished than Plex is, just that my impreession is contadictionary to yours of Jellyfin being a duct-taped mess. No idea why you would argue against another persons obviously subjective opinion?

1
Encrypt-Keeper lemmy.world EncryptKeeper@lemmy.world
Joined: 2023-07-03
#115 · (edited) Quote Reply

I don't think that is how it works. I don't necessarily need a reference to tell something is a good or a bad product. I have never said that Jellyfin is more polished than Plex is, just that my impreession is contadictionary to yours of Jellyfin being a duct-taped mess. No idea why you would argue against another persons obviously subjective opinion?

I’m not saying you don’t think it’s polished, I’m saying that if Jellyfin is where you set the bar for what “polished” means to you, then the rest of the open source world is going to blow your mind. Like you have nowhere to go but up from here.

Jellyfin being a duct taped mess on the other hand isn’t part of any subjective opinion, that’s just the state the software is in. Like it’s just missing basic features of its competitors, and has been stuck in relative development hell trying to rework the internals it inherited from Emby.

2
Psythik lemmy.world Psythik@lemmy.world
Joined: 2023-12-21
#116 · Quote Reply

Ah yes, the better option is to... use a streaming service that works by downloading random bittorrents in a completely opaque manner you have little to no control over.

You're misrepresenting how it works. There is nothing "random" or "opaque" about Nuvio. You pick and choose the exact file you want to see, just like browsing torrents. I go with the REMUX every time.

And It's better because you can watch anything you want instantly without having to download it first then transfer it to your Jellyfin library, and then delete the file when you're done watching. Nuvio simplifies the entire process. (Of course you can also save your download to your library to watch again).

You people frustrate me so much; you rather make up lies than simply try the app and see for yourself how much better it is than Jellyfin. Nuvio can do everything Jellyfin does, except better.

0
nonentity sh.itjust.works nonentity@sh.itjust.works
Joined: 2024-06-12
#117 · Quote Reply

Because Plexamp is by far the best music player I've ever used.

The lack of AirPlay 2, and the indignant dismissal by the lead developer when challenged on its omission, calls into question their technical comprehension and competency. That was around 5 years ago, and it’s still not been implemented.

2
lama lemmy.world lama@lemmy.world
Joined: 2023-07-03
#118 · Quote Reply

I manage it with netbird. Just have em install netbird, if it's on they can connect to my website. If it's off they can't. It's literally three steps for each person, there's ways to make this easy. It just requires the host to put in the leg work

I'll check it out! Thanks for the recommendation

1
halcyoncmdr piefed.social halcyoncmdr@piefed.social
Joined: 2026-01-15
#119 · (edited) Quote Reply

You're misrepresenting how it works. There is nothing "random" or "opaque" about Nuvio. You pick and choose the exact file you want to see, just like browsing torrents. I go with the REMUX every time. And It's better because you can watch anything you want instantly without having to download it first then transfer it to your Jellyfin library, and then delete the file when you're done watching....

I looked at it earlier... and it seemed ot be just another media app. Decided to take a closer look since you're so gung ho about it, and came to the same conclusion based on their website. Given what you're saying about it, and the complete lack of any of those claims by the company... you're the one not including relevant information.

The Nuvio website doesn't mention bittorrent usage at all. In fact, it doesn't mention acquiring media in any way. All of the advertising says the exact same thing that Plex, Emby, and Jellyfin all say.

Nuvio does not come with a catalogue. It plays the media you already have, and adds everything around it: the artwork, the numbers, the subtitles, and the memory of where you stopped.

That's literally what all of these media apps do. They take your existing media and make it pretty anbd easily accessible across devices.

It plugs into what you already use.

Nuvio plays from your own media server or from the addons you install. Tracking, ratings, artwork and skip markers come from the services you already use.

Hmm seems to be advertising the app as something that i playing YOUR existing media, going going out to get new media you don't have... except for that bit about addons. What you're describing doesn't seem to be native functionality of the app, but probably something provided by one of the add-ons they mention. Of which there is no apparent way to browse their addon library without installing the app, and I'm not going to do that just for a random discussion online with someone that is leaving out relevant information to try and make the claim something is better, when the app claims to do the exact same thing.

In fact, the subreddit, also seems to indicate that content acquisition isn't in the scope of the app or community.

Nuvio welcomes community addons that provide metadata (TMDB, Trakt, Simkl), subtitles, and custom catalogs. However, discussions or addons that facilitate access to copyrighted content, stream scraping or debrid link troubleshooting are strictly prohibited on r/nuvio. Posts containing images of unauthorized streams or stream-scraping addons are subject to removal. Violations of these rules will be removed.

So you're entire basis for proselytizing this app over the several other existing ones the community has already verified and ensured quality of for years... is an unsupported addon that the app's own community denounces and could stop working at any point because it's not officially supported in any way

You can keep your year old app that already seems to have a dozen other vibe-coded forks using the same name without anyone enforcing any sort of trademark. I'm sure there's absolutely no astroturfing going on here at all for what seems to be a chinese clone. I'm sure the piracy community has gone through the entire source code with a fine-toothed comb to ensure there's nothing hiding in the main apps or the community addons and that all code review is d=properly verifying quality and security. /s

GitHub Account Age Checker
https://github.com/NuvioMedia
Username: NuvioMedia
Created at: Mar 12, 2026, 2:11:01 AM (China Standard Time)
Account age: 223 days, 4 hours, 8 minutes

2
Psythik lemmy.world Psythik@lemmy.world
Joined: 2023-12-21
#120 · (edited) Quote Reply

I looked at it earlier... and it seemed ot be just another media app. Decided to take a closer look since you're so gung ho about it, and came to the same conclusion based on their website. Given what you're saying about it, and the complete lack of any of those claims by the company... you're the one not including relevant information. The Nuvio website doesn't mention bittorrent usage at all....
[deleted]
1
Blue_Morpho lemmy.world Blue_Morpho@lemmy.world
Joined: 2023-11-14
#121 · (edited) Quote Reply

What the fuck are you on about? Docker doesn't require podman at all Learning the basics of Docker isn't that complex. Certainly isn't as complex as learning how to run VMs on a dedicated headless server. If you look up "install docker", the first hit is, 9 out of 10 times, Docker Engine. NOT the desktop app... No, I am aguing that if you were capable of setting up Cisco BGPs in the mid-90s, wh...

Docker doesn't require podman at all

Podman isn't an addon for docker. Podman is the open source alternative containerizer to docker. When I first encountered Docker's AI Bonzai buddy called Gordon, Lemmy responded with, "Lol, everyone knows to not run Docker."

:

No, I am aguing that if you were capable of setting up Cisco BGPs in the mid-90s, when documentation was ass,

Documentation was far more thorough and accurate than today. First was everything was simpler. No VMs, No Containers. No https certificates unless they were e-commerce. The second reason is that documentation wasn't an afterthought because the project is done by volunteers. I got a 100+ page binder from Netscape just to cover how to configure their build kit. (The software to make a customized installation CD.) Today many projects documentation consists only of, "Check out the Discord."

The last important factor was the rate of change was slower so the documentation you got in 1996 was still completely accurate in 1999.

Edit:
Re docker engine.

The guides say install docker engine and point you to the docker website. Once on the docker website, the docker documentation tells you to install the docker gui to get the engine installed and walks you through the procedure of installing docker gui.

1
Psythik lemmy.world Psythik@lemmy.world
Joined: 2023-12-21
#122 · (edited) Quote Reply

I looked at it earlier... and it seemed ot be just another media app. Decided to take a closer look since you're so gung ho about it, and came to the same conclusion based on their website. Given what you're saying about it, and the complete lack of any of those claims by the company... you're the one not including relevant information. The Nuvio website doesn't mention bittorrent usage at all....

Out of the box, Nuvio cannot do much (hence why it's allowed in app stores).

Research more into now its plug-in system works. Specifically look into one of the following plug-ins: Torrentio or Comet.

Also learn what a Debrid service is, and then we can talk. Until then, knock it off with the conspiracy theories. It is mind-blowing to me how much effort you've put into wanting me to be wrong. That's fine; nobody's forcing you to use it. Stick with Jellyfin if it helps you sleep at night. I'll continue to enjoy pirating the easy way.

-2
DonutsRMeh lemmy.world DonutsRMeh@lemmy.world
Joined: 2025-03-13
#123 · Quote Reply

I wouldn’t call it subjective. The issues that it has are all objectively there, whether or not you’re bothered by them is what’s subjective. If you’re personally ok with all the quirks, bugs, missing features and general lack of polish that plague Jellyfin but not Plex more power to you. But those problems exist regardless, and they are the answer to the question you asked.

I didn’t know this was going to trigger so many people. lol. People paid money and are trying to justify their purchases. Good for everyone who uses it. I’ll continue using my “ugly, duct-taped-together mess” jellyfin I guess since I have zero issues with it and I don’t go out of my way to find “bugs” and “missing features” to just point out some things plex has that jellyfin lacks. Eh, it is what is.

0
Encrypt-Keeper lemmy.world EncryptKeeper@lemmy.world
Joined: 2023-07-03
#124 · (edited) Quote Reply

I didn’t know this was going to trigger so many people. lol. People paid money and are trying to justify their purchases. Good for everyone who uses it. I’ll continue using my “ugly, duct-taped-together mess” jellyfin I guess since I have zero issues with it and I don’t go out of my way to find “bugs” and “missing features” to just point out some things plex has that jellyfin lacks. Eh, it is what is.

You didn’t know that when you asked a question to the community that people would answer it? Ok.

So you asked the question rhetorically in bad faith because you just wanted to evangelize Jellyfin, got it. This is exactly why the Jellyfin’s Witnesses have the reputation they do lol

2
ThoGot feddit.org ThoGot@feddit.org
Joined: 2025-06-06
#125 · Quote Reply

I'm waiting to see the elusive Arch, Jellyfin Vegan stack in the wild. We know they exist and they are fucking telling everyone

Apparently not using Arch is the only thing keeping me from reaching my peak in life

3
CatLikeLemming lemmy.blahaj.zone CatLikeLemming@lemmy.blahaj.zone
Joined: 2023-07-20
#126 · Quote Reply

As someone who has nearly all internet facing software auto update with watchtower nightly my cortisol is so low

You mean watchtower by containrrr? That repo seems archived.

Also, if you don't mind me asking, how does that even work? There is a far from zero chance of potentially breaking changes on any given update, so with auto-updates, do you just accept that something might suddenly stop working, or do you just get notifications that a new version is available and update manually?

4
keyez lemmy.world keyez@lemmy.world
Joined: 2023-06-13
#127 · Quote Reply

I’m having a hard time understanding why you need all of that to just log into your jellyfin when you’re not home! You don’t need wireguard, or VNC or any of that jargon. That is something you chose to do for some reason. I can do it with literally the same way you said it "install the plex app and i emailed you your login details." Replace plex with jellyfin. Your mother won’t need to do anyth...

Plex is a bit more abstracted behind their services and auth, jellyfin runs exposed on the public internet in your case, I'm not willing to do that at present.

3
keyez lemmy.world keyez@lemmy.world
Joined: 2023-06-13
#128 · Quote Reply

Yeah, in the logs I saw they seemed to get my keys so I reset everything

What are admin keys that you're referring to?

1
Gwaer lemmy.world Gwaer@lemmy.world
Joined: 2023-07-07
#129 · Quote Reply

What are admin keys that you're referring to?

They’re cryptographic strings that plex uses to identify you on the back end. You reset them by changing your password and checking the sign out all devices button.

2
ThePuy feddit.nl AlboTheGuy@feddit.nl
Joined: 2023-07-02
#130 · Quote Reply

My Plex is updated, and hiding behind a random-long-text-string wildcarded subdomain that (so far) has not been discovered. My Crowdsec intercepted 5X the normal number of hacking attempts & port scans on October 17th... no doubt from dirtbags trying to exploit this.

Thank god I have auto update for my exposed dockers...

1
Taasz/Woof lemmy.blahaj.zone MangoPenguin@lemmy.blahaj.zone
Joined: 2023-06-19
#131 · (edited) Quote Reply

My Plex is updated, and hiding behind a random-long-text-string wildcarded subdomain that (so far) has not been discovered. My Crowdsec intercepted 5X the normal number of hacking attempts & port scans on October 17th... no doubt from dirtbags trying to exploit this.

Wildcard SSL does help a lot, since every subdomain isn't broadcast publicly in the issuer logs.

5
Taasz/Woof lemmy.blahaj.zone MangoPenguin@lemmy.blahaj.zone
Joined: 2023-06-19
#132 · (edited) Quote Reply

Someone please educate me, in case I’m missing something. Is there an excuse left why people use plex, not jellyfin? It’s now basically on every platform and even supports music and audiobooks.

It's easier to setup and use for less technical people, also just more widely known.

I run Jellyfin but logging in is definitely a pain, have to manually enter the URL (including https:// for some crazy reason, why doesn't it just default to it??) and username and password using a crappy TV remote.

2
Taasz/Woof lemmy.blahaj.zone MangoPenguin@lemmy.blahaj.zone
Joined: 2023-06-19
#133 · (edited) Quote Reply

You mean watchtower by containrrr? That repo seems archived. Also, if you don't mind me asking, how does that even work? There is a far from zero chance of potentially breaking changes on any given update, so with auto-updates, do you just accept that something might suddenly stop working, or do you just get notifications that a new version is available and update manually?

If it breaks I either fix it (often it's just an issue where the new version needs extra config added), or roll back to a backup and pin the old version temporarily if it really went wrong and I can't recover otherwise.

Backups run early AM before any auto updates start, and no one is using services and changing data then, so nothing should really ever be lost by rolling back.

2
Taasz/Woof lemmy.blahaj.zone MangoPenguin@lemmy.blahaj.zone
Joined: 2023-06-19
#134 · Quote Reply

Jellyfin has plenty of issues with public instances too. It's just the reality of exposing to the public internet, unless it's something that has a lot of dedicated work going into security it's going to have problems.

3
ITGuyLevi programming.dev ITGuyLevi@programming.dev
Joined: 2023-08-02
#135 · Quote Reply

Jellyfin has plenty of issues with public instances too. It's just the reality of exposing to the public internet, unless it's something that has a lot of dedicated work going into security it's going to have problems.

Could you specify any of those issues? I ask because the only one I'm tracking allows unauthenticated playback, but only if they know the path to the file on the machine which is very easy to change from default.

4
DonutsRMeh lemmy.world DonutsRMeh@lemmy.world
Joined: 2025-03-13
#136 · Quote Reply

It's easier to setup and use for less technical people, also just more widely known. I run Jellyfin but logging in is definitely a pain, have to manually enter the URL (including https:// for some crazy reason, why doesn't it just default to it??) and username and password using a crappy TV remote.

The difference in your comment between the two is only entering the URL, which is normally the first screen you are created with on jellyfin clients. you’re using the same crappy remote to enter the username password, no?

0
BakedCatboy lemmy.ml BakedCatboy@lemmy.ml
Joined: 2023-12-14
#137 · Quote Reply

You mean watchtower by containrrr? That repo seems archived. Also, if you don't mind me asking, how does that even work? There is a far from zero chance of potentially breaking changes on any given update, so with auto-updates, do you just accept that something might suddenly stop working, or do you just get notifications that a new version is available and update manually?

I use one of the maintained forks of watchtower.

I use it to auto update within stable versions for things that are reputable enough to not make breaking changes, so nginx, apache, wireguard, traefik, etc. In over 10 years of running Plex I don't think I've experienced a breaking update in the last 5-7 years at least, so I consider it safe enough. Any other software like Immich that I'm not sure if that's safe, I keep it behind a vpn and update manually. But for things as big as nginx especially I feel very safe letting it auto update within a major version.

1
ITGuyLevi programming.dev ITGuyLevi@programming.dev
Joined: 2023-08-02
#138 · Quote Reply

Sure explains why Plex was so cagey and uninformative when they emailed everyone to update their servers a couple months back. Not so much as a CVE report or change set. A vulnerability? No…. 4 of them. And they stack.

I just assumed it was because it lined up with them destroying the GUI, the new layout is the hot garbage that finally got my wife to opt for jellyfin.

2
Taasz/Woof lemmy.blahaj.zone MangoPenguin@lemmy.blahaj.zone
Joined: 2023-06-19
#139 · Quote Reply

The difference in your comment between the two is only entering the URL, which is normally the first screen you are created with on jellyfin clients. you’re using the same crappy remote to enter the username password, no?

Plex uses a code signin system where you open the app on your phone or just a browser, and enter the code there.

So there's no typing/entering anything on the TV at all.

1
Taasz/Woof lemmy.blahaj.zone MangoPenguin@lemmy.blahaj.zone
Joined: 2023-06-19
#140 · Quote Reply

Could you specify any of those issues? I ask because the only one I'm tracking allows unauthenticated playback, but only if they know the path to the file on the machine which is very easy to change from default.

There have been a few major ones this year, I'm sure they are fixed at this point though. https://app.opencve.io/cve/?vendor=jellyfin

1
DonutsRMeh lemmy.world DonutsRMeh@lemmy.world
Joined: 2025-03-13
#141 · Quote Reply

Plex uses a code signin system where you open the app on your phone or just a browser, and enter the code there. So there's no typing/entering anything on the TV at all.

Jellyfin has “Quick Connect” that does the same thing

1
ampersandrew lemmy.world ampersandrew@lemmy.world
Joined: 2024-03-18
#142 · Quote Reply

The main reason is that if you switch from Plex to Emby you're going from paid licenseware (fully enshittified) to paid licenseware (not fully enshittified yet). It's like when everyone finally dropped Skype and moved to... Discord. Which hey it's closed source and owned by venture capital, but it doesn't suck yet!!! And now in 2026, Discord is what Discord is.

It's been years, and there's only now a handful of programs that offer some of Discord's best features. If we had open source alternatives back then, I certainly would have entertained them.

1
pory lemmy.world pory@lemmy.world
Joined: 2023-06-17
#143 · (edited) Quote Reply

It's been years, and there's only now a handful of programs that offer some of Discord's best features. If we had open source alternatives back then, I certainly would have entertained them.

Well exactly. The VC projects get to accelerate their "right now" factor with money. Money that doesn't need to make a return on investment for another x years. That means, before those products start their hostile monetization campaigns, they will be unequivocally the best in their field by any metric other than "libre as in freedom".

Look at Twitter. Did people that jumped ship jump to the relatively mature but "fiddly" federated platforms, or did they jump to "it's literally Twitter but without ads and grok" in Bluesky?

We're on Lemmy, so we're obviously in a group more willing to tolerate "it's an open protocol with some weirdness but that's better than being on one corporation's server beholden to their rules and TOS".

Anyone switching from Plex to Emby in 2026 instead of to Jellyfin chose Emby for a reason. For them, Emby is a "better" product and "still free" the way Plex was free for all meaningful features (hardware acceleration, remote streaming...) in 2018. Maybe it'll never happen, maybe it'll take until 2030, who knows, but Emby is in the exact same state that Plex was before Plex closed the source and started rent-seeking.

1
ampersandrew lemmy.world ampersandrew@lemmy.world
Joined: 2024-03-18
#144 · Quote Reply

Well exactly. The VC projects get to accelerate their "right now" factor with money. Money that doesn't need to make a return on investment for another x years. That means, before those products start their hostile monetization campaigns, they will be unequivocally the best in their field by any metric other than "libre as in freedom". Look at Twitter. Did people that jumped ship jump to the re...

I mean...I'm on both of those, but I know I can use Bluesky as a linear feed like Mastodon, and as long as that still works with no algorithm, it solves my Twitter problem. I think the cycle of software innovation is that you have the first proprietary tool that solves a problem, like MS Office or 3DSMax, and then the most important parts of those programs are solved in open source software after a lag, like LibreOffice or Blender. Discord would always be replaced in time.

2
RxBrad infosec.pub RxBrad@infosec.pub
Joined: 2024-08-04
#145 · Quote Reply

In reply to an earlier post

I used the nicholas-fedor Watchtower branch for a while.

I use Dockhand now (switched to it when Portainer accounced their enshittification), and that has auto-update built-in. So I no longer needed Watchtower.

I believe Arcane also has auto-update, since Dockhand has hinted at their own enshittification a few years from now...

1
Seralth piefed.seralth.com Seralth@piefed.seralth.com
Joined: 2026-10-04
#146 · Quote Reply

I'll check it out! Thanks for the recommendation

Your welcome and good luck!

1
Post Reply Page 3 of 3   Goto page « First 1, 2, 3
Back to top