🇮🇹 🇪🇪 🖥

  • 0 Posts
  • 103 Comments
Joined 1 year ago
cake
Cake day: March 19th, 2024

help-circle






  • I presume you mean running Plex in host namespace. I don’t do that as I run the synology package, but I can totally see the issue you mean.

    Running in host namespace is bad, not terrible, especially because my NAS in on a separate VLAN, so besides being able to reach other NAS local services, cannot do do much. Much much much less risk than exposing the service on the internet (which I also don’t).

    Also, this all is not a problem for me, I don’t use remote streaming at all, hence why I am also experimenting with jellyfin. If I were though, I would have only 2 options: expose jellyfin on the internet, maybe with some hacky IP whitelist, or expect my mom to understand VPNs for her TV.

    (which doesn’t harden security as much as you think)

    Would be nice to elaborate this. I think it reduces a lot of risk, compared to exposing the service publicly. Any vulnerability of the software can’t be directly exploited because the Plex server is not reachable, you need an intermediate point of compromise. Maybe Plex infra can be exploited, but that’s a massively different type of attack compared to the opportunities and no-cost “run shodab to check exposed Plex instances” attack.



  • Well, as an application it has a huge attack surface, it’s also able to download stuff from internet (e.g., subs) and many people run it on NAS. I run jellyfin in docker, I didn’t do a security assessment yet, but for sure it needs volume mounts, not sure about what capabilities it runs with (surely NET_BIND, and I think DAC_READ_SEARCH to avoid file ownership issues with downloaders?). Either way, I would never expose a service like that on the internet.


  • Not to be “achtuallying” bit VPN is not a way to remote stream, it’s a way to bring remote clients in the local network.

    Likewise exposing services on the internet…not really going to happen esepcially for people - like me - that run plex/jellyfin on their NAS.

    I don’t have a horse in this race, i don’t use remote streaming, I only ever streamed from my nas to my 2 TVs, and I am experimenting with jellyfin. But for those who do need remote streaming, jellyfin is going to be problematic.





  • Right, then let me elaborate.

    Take furries. Using a moralistic approach such as yours I could conclude that they are freaks who encourage bestiality. Instead I think that consenting adults can do what they want as long as they are not harming anybody (this part was obviously implied, but suddenly you lost the ability to use context and imply things when it was convenient to build a strawman).

    Take women with control-related kinks. Using your moralistic approach I could go tell them that they are victims of bla bla bla who internalized bla bla bla, and that ultimately men who accept to please those kinks perpetrate bla bla bla. Instead, I think that consenting adults can get off the way they want.

    I could go on, but the point is clear, hopefully.

    On this topic you are a bigot. You are a bigot because you are essentially using a dogma that women can only act as victims of a system that oppresses them and nothing else. You are stripping away agency, and applying rigid moral rules grounded in that dogma. You are using a very similar approach that homophobes use to hate on gay people, you just think that you are doing it for good© reasons to defend oppressed minorities; or singular actually, because this only applies to women dating older men I suppose? Or you also have other definitions for wrong couples? Black woman/white man? Indigenous woman/white man? Poor woman/rich man? And what if this was a lesbian couple? 25yo woman/50+ woman?

    I would like to know the mental gymnastic to bend that “moral principle” so that you don’t end up against mixed race couples or similar, because if you consider people only expression of their social group, you absolutely can conclude that some (all?) of those relationships represent and perpetrate the same power inequality that exists between their demographics.

    Elsewhere you suggested to people to “check your own biases”, maybe you can take your own suggestion here and try to see if your analysis fell short.







  • People are allowed to date for whatever reason they want. As long as two adults are freely consenting it’s not up to you to be the moral police and decide what should push people to date each other.

    They can date for the looks, to look or feel younger, to go outside their comfort zone, for sexual pleasure, for pure intellectual attraction, for material benefit, for […long list].

    This is one of the instances in which the good goal of fighting abuse becomes bigotry. It’s basically like religious moralism.