• 0 Posts
  • 9 Comments
Joined 2 years ago
cake
Cake day: July 8th, 2023

help-circle

  • dogs0n@sh.itjust.workstoSelfhosted@lemmy.worldSharing Jellyfin
    link
    fedilink
    English
    arrow-up
    4
    arrow-down
    1
    ·
    2 days ago

    The internet is full of bots pounding at your machines to get in. It is only a matter of time until the breach Jellyfin.

    If you are talking about brute force attacks for your password, then use a good password… and something like fail2ban to block ips that are spamming you.

    This point doesn’t exactly match, but: public services like google auth don’t require users use vpns. They have a lot more money to keep stuff secure, but you may see my point… auth isn’t too trivial of a feature to keep secure nowadays. They implement similar protections, something to block spammers and make users have good passwords (if you dont use a good password, you are still vulnerable on any service).


  • I don’t think a vpn and mail providers can relate in this scenario.

    I have heard in the past that authorities have forced (possibly proton, but I forget) to basically wiretap incoming mail before proton can encrypt it for storage on the users account (because pretty much no one sends encrypted mail in a way that only the receiver can read it).

    The only data other than that, that they store is ip logs (when forced to, I believe) and recovery email addresses. They are not able to present existing encrypted mail to authorities (from before a wiretap).

    This seems overblown, I don’t think theres more they can do. Users have to start sending encrypted mail from their inbox, then the wiretapping won’t be an issue (proton address to proton address can work like this I think).



  • That article is stupid. Any company that receives a “legally binding order” has to comply with it… what would you expect?

    Most companies aren’t going to commit a crime to protect a user (like that one dude who ran an email service and destroyed it when he was required to hand over data, forgot his name!!!). If they did, they’d be out of business…

    (The article isn’t exactly dumb, but it doesn’t address this properly in my opinion. The outrage over it seems dumb to me. The government will force companies to do whatever it wants, be mad at the gov not the corpo in this case when its to apprehend a journalist or whatever… i understand if its a terrorist or similar, but this specific case may be more poopy om the gov behalf)



  • Thanks for your reply, I will definitely keep that in mind if Seafile fails to meet any critera moving on, but yeah your last point is also right, it would probably be a big pain to migrate out at this point with all my data for multiple users here.

    It seems a lot has been modernising recently, I didn’t know they were also using Go, but hopefully they continue with it for new code.


  • NextCloud being so slow forced me to migrate to Seafile.

    Seafile being less one-stop-shoppy made me not use it so much, but whenever I do it is always fast and responsive (unlike nextcloud, where 80% of the time I was looking at the loading indicator). Looking it up now though, it looks like it has a lot of new features I haven’t yet tried so I’m probably gonna start using it more now.

    Only downside with Seafile is it’s deduplication (for me), because it stops me from easily accessing files directly (always gotta use a client). Likely a benefit for most though and I do rarely need to access a file directly on disk, just when I do, it’d be an easy shortcut for whatever I’m doing.