Live data from Hacker News

WiiFin – Jellyfin Client for Nintendo Wii

github.com

111–120 of 131 posts

Re: WiiFin – Jellyfin Client for Nintendo Wii

#111
post #26

Earlier quoted context omitted.

What more does Plex need? I would consider myself a power user of Plex and it does everything I need it to do. I would think the only thing I can think of is fully self-hosted login instead of their cloud option, but I'm glad we have that option because I don't want to handle the authentication of my friends and family

* IPTV support (xtream codes etc.) yes proxies exist like Dispatcharr but first class support would be better * Better iOS/tvOS/OSX video playback (just buy Infuse because it can play so many titles the Plex player cannot) * Add full context menus everywhere. Playlists are virtually useless for anything other than playback in order or randomly. Why can't I multi-select items on a playlist and move them to another pla…

Subtitle settings turn off between episodes

you can enable global subtitles in settings.

Let me sort by file size so I can watch the disk gobbling files first

you can kinda deduce that if you sort by bitrate.

it sounds like you figured out a solution for yourself, already, but there's a lot of existing utilities like tinyMediaManager, WebTools-NG, Raddarr, Sonarr, etc. for doing media management. Plex is just a media server/player.

Re: WiiFin – Jellyfin Client for Nintendo Wii

#112
post #89

Earlier quoted context omitted.

Don't expose it to the internet unless you know what you're doing, or put it on a VPS you don't care about. Ideally keep it behind a VPN and give your family members access to it that way, and let local devices on your LAN connect to it without a VPN.

TLS is a must-have. They don't bother doing any kind of password hashing on login. It's sent in cleartext.

That's no different from how just about any other webapp works.

"Bothering" with client-side password hashing, in the absence of TLS, is security theater. It provides only the most trivial protection against eavesdroppers.

If someone can steal an unhashed password, then they can also steal whatever hash you send instead. If you try to fix this with some kind of ad-hoc challenge-response protocol, then the attacker can just steal your session cookie after login.

There shouldn't even be a question of using insecure HTTP for anything that requires authentication.

Re: WiiFin – Jellyfin Client for Nintendo Wii

#113
post #106

Earlier quoted context omitted.

I’d not put Jellyfin on a public IP, even indirectly. I’d be surprised if it’s not full of exploits.

I whitelist my friends IP blocks, seems to work well enough. No way in hell I'm convincing them to install tailscale or similar on their TV / router.

How's the bandwidth and transfer limits on that $5 VPS, would be my next concern? One approximately-perfect-Bluray-quality 4K movie can be north of 50GB, decent quality, still 20+GB. Very-high-quality 1080p is gonna be like 8-12GB for a movie, OK quality, 4.5-6GB.

Re: WiiFin – Jellyfin Client for Nintendo Wii

#114
post #106

Earlier quoted context omitted.

I whitelist my friends IP blocks, seems to work well enough. No way in hell I'm convincing them to install tailscale or similar on their TV / router.

How's the bandwidth and transfer limits on that $5 VPS, would be my next concern? One approximately-perfect-Bluray-quality 4K movie can be north of 50GB, decent quality, still 20+GB. Very-high-quality 1080p is gonna be like 8-12GB for a movie, OK quality, 4.5-6GB.

Only for outgoing - 2TB included, each additional TB is $1. It was 20TB included when I set this up in 2024, but they've since changed their policies.

If I used their (Hetzner) servers in the EU it's still be 20TB, but I prefer having the server 10 miles from my house.

Plenty fine with that pricing since I also use it to un-CGNAT services on my home server (I'd run this through Tunnels if it was significant)

Generally ~22GB 4k hdr muxes or ~8gb 1080p.

Re: WiiFin – Jellyfin Client for Nintendo Wii

#115
post #114

Earlier quoted context omitted.

How's the bandwidth and transfer limits on that $5 VPS, would be my next concern? One approximately-perfect-Bluray-quality 4K movie can be north of 50GB, decent quality, still 20+GB. Very-high-quality 1080p is gonna be like 8-12GB for a movie, OK quality, 4.5-6GB.

Only for outgoing - 2TB included, each additional TB is $1. It was 20TB included when I set this up in 2024, but they've since changed their policies. If I used their (Hetzner) servers in the EU it's still be 20TB, but I prefer having the server 10 miles from my house. Plenty fine with that pricing since I also use it to un-CGNAT services on my home server (I'd run this through Tunnels if it was significant) Generall…

Damn, that's decent, yeah that'd get you a ways. Imma stick with free peer-to-peer VPN via Tailscale because it's already working for me, but I can see the appeal of that.

Re: WiiFin – Jellyfin Client for Nintendo Wii

#116

Earlier quoted context omitted.

The last time I was involved in a thread like this, I was banned from r/plex. I pointed out that Plex should do ebooks. It is a natural fit. They keep track of how far in a series or a show you are, they could keep track of where you are in a book. Many of the Plex idioms transfer well. It has a clear visual style that helps you to pick out the shows you might try, or shows like those you've already watched. BUT IT'S…

I just want to throw out that you might like Kavita for a comic/book server. It's built to feel like Plex. https://www.kavitareader.com/ I do agree that Plex doesn't seem like a good fit for books and comics. The first major hurdle is the lack of a singular metadata source that Plex can hook into for metadata - although this year has shifted with Hardcover and MangaBaka. Plex also uses a filename parsing mechanism (l…

Thanks for this. First I've heard of it. I'd prefer something more general for books (though there are comics too). I have about 22,000 titles, filenames well-constructed, that I don't have anything to serve them up remotely. I was using Nextcloud for awhile, but it's subpar.

>which has drawbacks since books and comics have an extremely wide variety of naming conventions

I actually have that part figured out. For periodicals too, like comics. The real trick with those is that it's often not that easy to find the ISSNs for them, they mostly don't list them on the inside cover.

Re: WiiFin – Jellyfin Client for Nintendo Wii

#117
post #99

Earlier quoted context omitted.

Adding to the list: postgres (or any real db) support. I’ve had to repair their SQLite db so many times. It’s so common they have a help guide on it too and folks have made automated scripts to do it for you.

How do they manage to get their sqlite database in such a state where it would need "repair"? how would psql fix this? > or any real db sqlite is literally the state of the art database . I suspect you mean "database server" or something

I'm guessing incomplete migrations or similar problems where stuff is just partially written, or out of sync. The Plex db is kinda complex under the hood.

Re: WiiFin – Jellyfin Client for Nintendo Wii

#118
post #62
post #45

Earlier quoted context omitted.

Perhaps. Y'all (collectively) have some good ideas. But she likes the Roku. She's even got silicone skins for the remotes (plural; spares!), and two of them are tethered near the chairs that her and dad tend to sit in. Also: The Roku stuff already exists, and is paid for, and it works with Plex (without a VPN, because my local Plex container didn't come with the caveat to avoid exposing it to the world). Buying them…

Sad to hear about people getting stuck in weak ecosystems. By the way, I switched from Jellyfin to plain SMB + Nova Player (Android), which has basically the same interface, but no user profiles, and works over SMB, obviously. No transcoding, best format support, and best performance for large files I've found yet for my TCL Android TV.

I mean, for my TV at home where everything is connected with a gigabit LAN, I usually use Kodi on a Pi4, over SMB, with a Logitech KT400 to drive it from wherever I feel like sitting.

It's silent, reasonably self-contained, and is appliance-like to get going (just dump OpenELEC onto an SD card, plug everything in, and then simply begin using it).

Plus, there's two HDMI outputs: One that connects directly to the the dumb TV and sends only video, while the other sends only lossless PCM audio to the once-rather-high-end AV receiver (that gets choked up on more-modern HDMI bitrates).

And that's great for me at my house, with my pile of gear, and with my technical proclivities.

But I'm not my mom, and this isn't my mom's house. :)

Re: WiiFin – Jellyfin Client for Nintendo Wii

#119
post #89

Earlier quoted context omitted.

TLS is a must-have. They don't bother doing any kind of password hashing on login. It's sent in cleartext.

That's no different from how just about any other webapp works. "Bothering" with client-side password hashing, in the absence of TLS, is security theater. It provides only the most trivial protection against eavesdroppers. If someone can steal an unhashed password, then they can also steal whatever hash you send instead. If you try to fix this with some kind of ad-hoc challenge-response protocol, then the attacker ca…

> "Bothering" with client-side password hashing, in the absence of TLS, is security theater.

Filtering out unsophisticated attackers I would not classify as "theater".

Read this, and let me know if the implications of port forwarding your server (or putting it on IP6) is readily apparent:

https://jellyfin.org/docs/general/post-install/networking/#s...

A lot of these users are not very sophisticated themselves. The least sophisticated attackers are likely to be the most numerous.

This is bad. People who say it's not bad (or worse, suggesting anyone dumb enough to publicly expose their server without TLS) are engaging in security snobbery.

Re: WiiFin – Jellyfin Client for Nintendo Wii

#120
post #56

Earlier quoted context omitted.

Same as anyones: random bots scanning IP/ports to find established services and trying exploits from the book.

With a reverse proxy, I don't see how this would work. The whole way the reverse proxy works is you use a subdomain name ("jellyfin.yourdomain.org") to access Jellyfin, rather than some other service on your server. The reverse proxy sees the subdomain name that was used in the HTTP request, and routes the traffic based on that. Scanning only the IP address and port won't get attackers to Jellyfin; they need to know…

true, but I kinda dont want hiding from plain sight to be my only line of defence.
Post reply on HN