What’s your go too (secure) method for casting over the internet with a Jellyfin server.

I’m wondering what to use and I’m pretty beginner at this

  • frezik@lemmy.blahaj.zone
    link
    fedilink
    English
    arrow-up
    4
    ·
    2 days ago

    Specifically these issues: https://github.com/jellyfin/jellyfin/issues/5415

    The big one is that video/audio playing endpoints can be used without authentication. However, you have to guess a UUID. If Jellyfin is using UUIDv4 (fully random), then this shouldn’t be an issue; the search space is too big. However, many of the other types of UUIDs could hypothetically be enumerated through brute force. I’m not sure what Jellyfin uses for UUIDs.

    • MaggiWuerze@feddit.org
      link
      fedilink
      English
      arrow-up
      1
      ·
      19 hours ago

      They don’t. Ids in Jellyfin are based on the path of the file, so easily guessable with a sufficiently large rainbow table