this post was submitted on 19 May 2026
517 points (98.0% liked)
Technology
84816 readers
4119 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
depending what is on it, and your risk factor, theoretically an attacker can check known resource paths to confirm or deny whats on the server. That's my main complaint currently on it is that the jellyfin team is aware of the fact that it doesn't need authentication, but are looking for some miracle solution that won't toss legacy clients out in order to fix, so therefore the issues are just perpetually open.
edit: it looks like some of these issues may be being worked on now that they moved the problemic protocal into a plugin. I hope that that means they will close them in the next few releases!