Collection of potential security issues in Jellyfin This is a non exhaustive list of potential security issues found in Jellyfin. Some of these might cause controversy. Some of these are design fla…

  • bizarroland@fedia.io
    link
    fedilink
    arrow-up
    8
    ·
    2 days ago

    You can’t say that a solution is no security at all when it requires time and intelligence to bypass.

    It is at least 0.01 security.

    • whats_all_this_then@programming.dev
      link
      fedilink
      arrow-up
      6
      ·
      2 days ago

      Effort or no, if an attacker can reasonably bypass it, it’s not secure. That’s why software gets security patches all the time, why encryption/hashing algorithms can fall out of favor, and why quantum computing can be pretty fucking scary.

        • LandedGentry@lemmy.zip
          link
          fedilink
          English
          arrow-up
          5
          ·
          edit-2
          2 days ago

          You’re hiding behind literal definitions to avoid addressing the functional issue/implications.

          This is like when somebody says “no one believes that“ and the other person finds a tweet by one person that believes the thing. The claim isn’t that literally not one person does, it’s that it’s so unusual you may as well act as if nobody does.

          Surely you understand how people talk and basic vernacular?