this post was submitted on 02 Apr 2025
229 points (100.0% liked)

Technology

38453 readers
494 users here now

A nice place to discuss rumors, happenings, innovations, and challenges in the technology sphere. We also welcome discussions on the intersections of technology and society. If it’s technological news or discussion of technology, it probably belongs here.

Remember the overriding ethos on Beehaw: Be(e) Nice. Each user you encounter here is a person, and should be treated with kindness (even if they’re wrong, or use a Linux distro you don’t like). Personal attacks will not be tolerated.

Subcommunities on Beehaw:


This community's icon was made by Aaron Schneider, under the CC-BY-NC-SA 4.0 license.

founded 3 years ago
MODERATORS
 

Collection of potential security issues in Jellyfin This is a non exhaustive list of potential security issues found in Jellyfin. Some of these might cause controversy. Some of these are design fla...

you are viewing a single comment's thread
view the rest of the comments
[–] anarchiddy@lemmy.dbzer0.com 44 points 1 day ago (2 children)

I'm not sure who needs to hear this, but unless you work as a security engineer or in another security-focused tech field, you really shouldn't be exposing your homelab to the open internet anyway

Most people access their homelabs via VPN - i don't see anything here that's a problem for that use-case.

[–] ocean@lemmy.selfhostcat.com 14 points 1 day ago (1 children)
[–] anarchiddy@lemmy.dbzer0.com 14 points 1 day ago

And I would hope those websites are extremely low-risk and not anywhere near essential infrastructure or data ;)

[–] jagged_circle@feddit.nl 4 points 1 day ago (1 children)

I need to run a VPN already. Fine for desktop, but this isn't a solution for mobile (where you can't run two VPNs simultaneously)

[–] hareen@social.ookami.space 11 points 1 day ago (2 children)

@jagged_circle @anarchiddy

It's actually possible to run 2 VPNs simultaneously on mobile using RethinkDNS which is an app available on F-Droid. For example I'm currently connected to MullvadVPN and my home network at the same time using two WireGuard configs.

[–] jagged_circle@feddit.nl 2 points 1 day ago* (last edited 1 day ago) (2 children)

Can you order the wireguard connections?

Eg I want my connections to my home server VPN to first go through my mullvad VPN. Because I dont want any connections coming out of my device that don't go through a shared VPN or Tor.

This may be easier to do on your home network’s router. For instance, mine allows me to set it up as a VPN host, and also to connect to a VPN provider. It has the option to pass all of the connected clients through the connected VPN. So for instance, if I connect my phone to my home VPN, and my home router is connected to Mullvad, my phone’s traffic also gets passed through Mullvad.

[–] hareen@social.ookami.space 1 points 1 day ago* (last edited 1 day ago)

@jagged_circle from my experience with it, I don't think it's possible to route VPN traffic via another VPN. It only lets you split tunnel app traffic via multiple VPNs of choice as per attached image.

Another way to achieve something similar would be to setup a work and a private space (recently introduced on android). Each can run it's own VPN connection which allows you to run 3 simulataneous VPN connections on android.

[–] jagged_circle@feddit.nl 2 points 1 day ago

Omg thank you!