• 0 Posts
  • 107 Comments
Joined 2 years ago
cake
Cake day: July 8th, 2023

help-circle

  • Sorry, I wasn’t clear. When I said “why do you care?”, I didn’t mean YOU specifically with OPs potential problem of losing users.

    I meant why do people in general, who self-host software for friends/family, care if their friends/family stop using the software.

    E.g. I have friends on Plex, but for whatever reason, I decide I want to move to Jellyfin. My friends stop streaming my media because they dont like jellyfin for whatever their own reasons may be. I personally wouldn’t care about losing them as “users”, because it’s not like they are paying customers. I let them access my instance for free, if they aren’t bothered enough to use it, then thats on them, not me to cater to their needs by keeping Plex around.

    Hope that cleared up my meaning. I wasn’t attacking you for caring with your original response.

    p.s. you are at risk by hosting Plex too, just in different ways. Plex still requires your server is open to the internet, right? Even if only Plex’s servers can access it, who’s to say Plex themselves don’t get hacked. Always a risk/reward type deal with hosting software, in my opinion, either are fine to expose.


  • Yes, you are right, but I think my point was missed.

    Theres not much reward for hackers to hack private jellyfin hosts (unless there is some big exploit that gives remote code execution that im unaware of), sure the bots will scan and try exploits on open ports, but are they specifically targetting jellyfin?

    There is always a risk, but in my opinion, the chances of being hacked through jellyfin are way too low to bother with over-bearing measures, like a required vpn connection.

    Running jellyfin in a secure manner (without root, only access to your content, etc) reduces the risk of much harm too.








  • Like Steam is doing?

    I don’t think their cut is them being greedy.

    Your plan might not be economically feasibile, because companies need money for growth (new products, R&D, etc), so only charging enough to run is not possible.

    Steam is probably doing a kindness by not charging an infrastructure fee every year to developers, that shiz would probably really expensive.

    The cost of the cloud features they provide is likely, usually, understated. Just the bandwidth costs alone of allowing your game to be downloaded whenever the user wants and however many times they want is expensive enough. Add on cloud saves and all the other niceties…

    All that is just to say that Epic is likely losing a lot of money here just to try enticing more developers to move over, and maybe bring some customers too, but it’s not gonna work. They are lucky the fortnite piggybank lets them do this, but it’s not smart by any means.



  • Neat facts, but they don’t justify the awful game store they have created. They can’t even handle a downloads queue that you can change around, which is embarrassing. They have 1% of the features that Steam provides, so rightly they can’t charge the same.

    Would be nice if Source 2 was available to anyone, but it isn’t a product they want to sell/support. It’s mostly meant to power their own games (like most game studios, they can have their own inhouse engines). Maybe as it gets more mature they could explore this possibility idk.

    Steam has been quietly collecting cheques while their Source Engine has collected dust.

    Very innacurate.

    Valve create so much great software around gaming. Steam gets updated very frequently with bug fixes and new features (just recently we got game recording).

    Source 2 is likely constantly being worked on (featured in 2 of the most popular pc games: CS2 and Dota2). Maybe randoms like us could never use it, but they still work on it unlike your statement would suggest.

    Not to mention Proton, which helps every linux gamer run Windows games.

    30% may sound steep, but it’s not really when you consider what Steam provides: Game distribution (downloads, forever), community features, steam workshop/marketplace (if implemented), inventory system, game networking, in-game purchasing, achievements, etc, etc. I’m not a game developer, but theres probably a million more things they do. I’m not even mentioning the features they provide just for us, the gamers (mainly family share, thats simply amazing).

    I’ve been getting through GoG.

    Very awesome, GOG and their goal of preserving video games is great.

    My p.s. wrapup is that Epic is barely a launcher when compared with Steam. Yes Epic can launch a game, but it does nothing else (well) at all.

    Even with all the years they have had for development, they’d rather try to shove money into game devs faces (or customers with free games) than fix their app. I hope they realise this is a mistake, because you can get game devs to move over with lots of money, but customers who are spending money won’t if they arent treated well. This isn’t a long term strategy they have been using and this 0% fee seems like desparation to me (not to say they are poor, cuz fortnite pays the bills, but they likely aren’t seeing much growth).

    I hate defending corporations, but Valve is the one that I hope every other company looks at and tries to mimic because they have only done good for their customers.




  • If you’re looking at getting a new (used) phone, I would suggest GrapheneOS (the most secure/private de-googled rom afaik).

    You need a Pixel phone, the newer you get the longer you will keep getting software updates for the future (if you keep the phone past these many years of support, then I believe switching to a other rom will be required for security patches etc. Each phone is supported until Google stops supporting them I believe). You said you don’t care about updates because you can keep it from connecting to the internet, but it’s a plus anyways.

    If you plan on never touching a google service, GrapheneOS allows for that (nothing google by default), but on the other hand, if you need google play, etc for banking apps or whatnot, they have that covered with Sandboxed Google Services (which you can run solely in another user profile on your phone for added privacy).

    Anyways, I think GrapheneOS in a great option & their website has much more info if you’d like to continue hearing about it:

    https://grapheneos.org/

    p.s. you can check their website for how long different pixels will have continued support before (if) you get one (incase anyone else is reading this).



  • Hm I don’t remember posting the comment you are replying to, to the one I replied to.

    You are right, but I still argue that keeping Jellyfin up to date is fine, there’s no serious bugs (afaik) that will compromise your whole server for instance, so these bots have nothing valuable to exploit here.

    When I say don’t post your instance url I was talking about normal people finding it to try streaming from it without auth, I think I was replying to someone else and though this was the same thread.


  • I find it hard to believe that there are bots scanning for jellyfin exploits, since as far as I’m aware, the exploit is for viewing content without auth. 99% of bots are scanning for old instances of wordpress or other outdated software to exploit.

    If my content on Jellyfin was illegitimate, the person scanning for my files would have to prove that before they can sue, no? I don’t think this makes sense for anyone to do.

    p.s. I won’t argue that YOU should setup software that you dont want to, just that this particular reason not to may be a bit farfetched.



  • I agree with you, it’s likely this vulnerability is only known because Jellyfin is open source… how many are hiding in Plex’s proprietary source code…

    Anyways when has anyone ever been pwnd by this “exploit”, I have seriously never heard of anyone being “hacked” by one of them.

    Definitely overblown as far as I am aware… don’t post your instance url all over the internet and you will likely be fine.

    Using Plex (is fine, do whatever u want) and giving them your data instead doesn’t really help you (or at least sending your data through them).