Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)D

dogs0n

@ dogs0n @sh.itjust.works

Posts
1
Comments
312
Joined
3 yr. ago

  • How to start my own business?

    Jump

  • Do you really only have 3 hours per week? Obviously I don't know your full circumstance, but maybe there is time you are not using well? Or maybe you decide to sacrifice time elsewhere (gym, etc) to spend more on your projects.

  • RIP Minecraft, I'll miss you

    Jump

  • We have third party launchers already? Does that solve da issue

    Prism Launcher is amazing btw

  • What's a time you stuck to your principles despite it being inconvenient to you?

    Jump

  • (I don't wanna be that guy, but nothing you said sounds like an inconvenience to me. I say this because using proton > google isn't an inconvenience, just a choice.. etc, I guess installing an os could be an inconvenience but not really, they make it super easy nowadays. Anyways didn't wanna poop on ur parade or put you down, but ur post might scare people into trying alternatives, when it's really not thst different from what they have now, just better)

  • What's the security situation when opening a jellyfin server up for casting?

    Jump

  • Hehe yep, that's a good takeaway and the same as what I think.

    Thank you too, i enjoyed this discussion.

  • What's the security situation when opening a jellyfin server up for casting?

    Jump

  • No problemo.

    Thanks for pointing out the reverse proxy comment. I think I was wrong to say simply putting jellyfin behind a reverse proxy will increase your security.

    The benefits may only be minute or non-existent if you don't use the reverse proxy for handling other stuff like HTTPS (and redirects to https, etc), restricting access or adding extra authentication requirements (mainly https).

    It may also be good to note that Jellyfins docs explicitly do not recommend directly exposing jellyfin ports to the internet (a reverse proxy or using a vpn are recommended instead).

    Still I will continue to feel safer always using a reverse proxy when I expose to the internet (maybe my misconceptions).

  • What's the security situation when opening a jellyfin server up for casting?

    Jump

  • Your SSH setup is good.

    ssh is a very resilient piece of software so I doubt with your setup you would encounter any issues.

    Enforcing use of a VPN to get into your network before being able to ssh into a machine is mostly just an extra layer of defense, though using a non-standard port, only allowing key logins and disabling root user login are all layers of defense you have already added.

    I thinj you'll be fine, but if you are worried, you could setup a VPN or alternatively something like Fail2Ban if you notice any brute-force attacks (which may be unlikely with the use of a non-standard port).

    What I meant with the Jellyfin question was kind of, how is having it exposed via a reverse proxy different from exposing its port right away? Is it because the only allowed connection would be HTTPS/encrypted etc, maybe?

    It's down to how secure the software is really.

    Jellyfins (and other software) don't use really secure web servers for getting themselves accessible via the network.

    Caddy (a reverse proxy, for example) is made to be exposed to the internet and so it is more resilient and safe to use.

    So putting the resilient software (a good reverse proxy) infront of Jellyfin (or most other software) simply increases your security by having the more safe web server be the one interfacing with end users.

    Have fun on your journey!

  • What's the security situation when opening a jellyfin server up for casting?

    Jump

  • If you don't want to worry too much, you can setup a vpn (like wireguard) on your server for ssh access.

    Using a non standard port is a good idea, but not entirely foolproof because bots might still port scan (even if unlikely that they do that for ssh I'm not sure). At a mininum, you probably want to use keys for login like the other commenter on the main comment said.

    Personally, using a vpn for when I want access to SSH when I'm out is worth the couple hours setting it up the one time (very simple setup with wireguard-easy for example). Maintenence time spent on upgrading is very low.

    (Tl;dr personally I'd use a vpn to access ssh specifically rather than exposing it to the internet)

    Same thing for Jellyfin?

    Not 100% sure what you mean, but to clarify: Don't accidentally expose jellyfins port to the internet (eg the default port 8096). Make sure it is only accessible from outside your network through your reverse proxy.

  • What's the security situation when opening a jellyfin server up for casting?

    Jump

  • I agree, there is a lot of paranoia, but honestly that's probably a good thing, because the people who are paranoid might not know that much, so a good amount of paranoia is healthy there.

    The chance of being exploited is very low for me to care too too much. Why spend countless days locking up my entire infra when there's a very low low chance anyone could exploit me in the first place (obviously get your setup to a good standard, I don't recommend not reading up on anything and exposing server, etc. Just for me, I don't need to over do it).

    That being said, personally I have ssh behind a vpn because that's a very important service that only I am accessing anyways, so it makes sense for me to disable that attack vector.

  • RAM prices soar, but popular Windows 11 apps are using more RAM due to Electron, Web components

    Jump

  • Cool, thank you for the knowledge!

  • RAM prices soar, but popular Windows 11 apps are using more RAM due to Electron, Web components

    Jump

  • If your app interfaces with the OS, like most apps would (reading a file, managing the window, etc), then you would be writing rust, no?

  • RAM prices soar, but popular Windows 11 apps are using more RAM due to Electron, Web components

    Jump

  • Doubt it

  • What's the security situation when opening a jellyfin server up for casting?

    Jump

  • The default configuration for Jellyfin is good. I mostly mean as long as you follow best practices in general you should be fine, eg:

    • You keep your system and jellyfin updated;
    • have some type of firewall in place;
    • make sure you aren't accidentally exposing jellyfins port directly to the internet;
    • have a good password for your jellyfin accounts that are able to login from outside the LAN;
    • and so on and so forth

    https://jellyfin.org/docs/general/post-install/networking/reverse-proxy/

    A firewall is probably the most important, having your ssh port blocked in the firewall being second.

  • What's the security situation when opening a jellyfin server up for casting?

    Jump

  • As long as your jellyfin server is properly configured behind a reverse proxy, letting it be accessible publicly on the internet is fine.

    Obviously everyone has their own threat model, but it's not that big of a threat in this case (personally I don't care).

  • Ok, honestly, is cast-iron really any better than a non-stick, stainless, copper (anything else?) pan?

    Jump

  • Your wife sounds smart, listen to heerrrrrr.

    Also I don't know, but since hearing about non-stick pans leaking cancer into your food (if you scrape them with a fork, etc), I just like to use a normal pan.

  • Mozilla’s Betrayal of Open Source: Google’s Gemini AI is Overwriting Volunteer Work on Support Mozilla

    Jump

  • The money from Google was surely what killed their browser. I'm not saying there was a behind the scenes deal. They just got lazy and spent Google's money in stupid ways instead of improving their product so that they could gain a real userbase.

    Imagine if they spent that money towards just the browser (not possible, but imagine anyways), we could be in a very different place where Chrome doesn't have 99% (or whatever it is) market share.

    Firefox is a good browser, but where could they have been today if it was prioritised over paying the CEO millions for nothing? They have recently been sorta catching up, i've seen a lot of updates that actually include features I use, but I think it's too late.

    Time for one of the new built from the ground up browsers to shine when complete. I still stand by Firefox and recommend it, but as soon as their is an open competitor that is production ready, I'm outta here.

    They have undoubtly done amazing things for the web, but their idiocy is astounding sometimes and I don't wanna stay on a sinking ship. I'd rather use a new browser that helps keep the web secure, safe a pleasant for us all without annoyances or dumb beurocracy.

  • Electron apps

    Jump

  • I will concede on the "not really an IDE" part. You're right you can set it up to be like one.

    I say it's not mostly because it isn't marketed as one. It's marketed as just a source code (text) editor.

  • Electron apps

    Jump

  • Oh wow my mind is blown. Even more so that it's 256mb of DRAM and 256mb of VRAM separately.

    We have really gone down hill and fast ;(

    In my brain memory I find it hard to believe all the textures loaded at one time could ever be so small. Im amazed.

  • Electron apps

    Jump

  • Most people still only have 16gb of ram (like me).

    Electron is net good, but only for small teams that need to ship fast or solo devs etc who already know js and just want something to work.

    Billion dollar companies using it instead of paying more for native apps is a horrible use case (that's mainly where my complaints live).

    At the very least, I hope we move to something that can use webviews on our system rather than bundling their own which would save on resources (but opens the possibility for version mismatches i guess, I dunno if you can "peg" that sorta stuff to a working version.. but i guess thats just how browsers work so..).

  • Electron apps

    Jump

  • It's not really an IDE and it's not lightweight either.

    It's not snappy. Sometimes just moving up a couple lines fast causes my caret to lag, which is not pleasant.

    That might have more to do with when you have lots of plugins for LSPs, etc, but who uses vscode without any plugins?