GEBIRGE
Joined 3 years ago
Karma
16
Submissions
6
Member since
Jun 11
Recent submissions
Comment · 2 years ago
Foliate is really good with the security aspects of rendering ebooks. See the author's foliate-js library project (https://github.com/johnfactotum/foliate-js?tab=readme-ov-fil...).
I've recently written an article about the dangers of ebooks. Maybe it's of interest to some: https://gebir.ge/blog/every-trick-in-the-book/
Comment · 2 years ago
Hey, that‘s my article - thanks for submitting. :^)
If there are any questions, please let me know.
Comment · 3 years ago
That's really the key point here: Trusting the people you share the server with.
Jellyfin is kind of binary in that regard. Once you're authenticated - no matter the privileges - you can reach a lot of places. I've written about this recently, if anyone's interested.
Like others have mentioned, you should probably only expose the server to a trusted group of users (ideally not directly on the Internet).
Comment · 3 years ago
I get where you're coming from. Naming vulnerabilities has been discussed ad nauseam, so I won't even bother trying to add something. Both sides have valid arguments.
Personally, I just really like puns :D.
Comment · 3 years ago
Come on, what's not to like about the current name? It even ties in with the demo!
Though PolyPwn is a winner, too.
Comment · 3 years ago
Thanks, my spell checker won't help with that :^).
I write about my discovery of the information security field over at https://gebir.ge.