We have recently experienced a security incident that may potentially involve your Plex account information. We believe the actual impact of this incident is limited; however, action is required from you to ensure your account remains secure. What happened An unauthorized third party accessed a limited subset of customer data from one of our databases. While we quickly contained the incident, information that was accessed included emails, usernames, securely hashed passwords and authentication ...
  • floofloof@lemmy.caEnglish
    1·
    4 months ago

    Went there to update my password but got reminded what a horrible experience Plex is these days, so deleted my account instead.

    • Squizzy@lemmy.worldEnglish
      0·
      4 months ago

      I’ll probably get the lifetime pass after seeing how cumbersome setting up jellyfin is.

      • kylian0087@lemmy.dbzer0.comEnglish
        0·
        4 months ago

        Installing jellyfin is as easy as setting up any self hosted thing though… Just use docker compose if you want simplicity.

          • kylian0087@lemmy.dbzer0.comEnglish
            0·
            4 months ago

            Wireguard is also very simple to setup. This would allow you to share other services you host in the future in a secure way as well.

            • bread@sh.itjust.worksEnglish
              0·
              4 months ago

              Your mom’s Tizen TV doesn’t have a Wireguard or Tailscale client, so you’re going to be the person configuring her router, or setting up a Pi or something, as well as now being the designated tech support.

      • Green Wizard@lemmy.zipEnglish
        0·
        4 months ago

        Personally, I found it as easy as Plex. I started my self hosting journey with Plex and Minecraft servers on a windows pc. Now I’m launching docker containers over ssh and lxc containers in proxmox for Jellyfin. Minecraft is still the hardest thing to host lol

        • MonkeMischief@lemmy.todayEnglish
          0·
          4 months ago

          Minecraft is still the hardest thing to host lol

          I’m actually considering hosting a Luanti / “MineTest” server for this experience, since my wife lost her Minecraft account / key thingy since the time we played in beta ages ago haha.

          I wonder if it’s any easier to host or not. 🤔

          • artiman@piefed.socialEnglish
            0·
            3 months ago

            minetest is on maintenance mode so they can focus on the engine itself luanti you should use mineclonia from luanti it’s much more fleshed out

  • bridgeenjoyer@sh.itjust.worksEnglish
    0·
    4 months ago

    Meanwhile I made a post asking if plex is bad now and most people on it said “no it’s great I paid for my lifetime pass years ago and its been the best!” Yeah, we know the truth now.

    Jellyfin all the way.

  • sunzu2@thebrainbin.org
    0·
    4 months ago

    Plex can’t catch breaks recently.

    Self hosting does come with risks though. People should be on notice.

    • Karna@lemmy.mlOPEnglish
      0·
      4 months ago

      In general, for self-hosting, we hardly rely on remote service/server. The whole idea of self-hosting is to shun dependency on external service/server, and run everything on your own hardware and network. So that every aspect of the service is in your control. I don’t think self-hosting comes with much risk, unless you make your service available on Internet.

      • Wolf314159@startrek.websiteEnglish
        0·
        4 months ago

        Jellyfish cannot to setup to securely and safely be exposed to the Internet. It is only safe to access through a VPN. That rules it out as an option for sharing with friends, family, or even my own spouse. You call it phoning home to the mother ship; I call it paying Plex to manage user authentication for me. Until Jellyfin’s security holes are patched and it becomes clear that the Jellyfin developers actually care about security, it stays locked down to my LAN. Setting up a VPN is difficult for the average user on a good day, impossible in some circumstances on even the best of days, and is not access I want to hand out (and support) to all the people I share my Plex with anyway.

  • FreedomAdvocate@lemmy.net.auEnglish
    0·
    4 months ago

    Should have been put in the OP because people are going to jump the gun:

    While we quickly contained the incident, information that was accessed included emails, usernames, securely hashed passwords and authentication data.

    Any account passwords that may have been accessed were securely hashed, in accordance with best practices, meaning they cannot be read by a third party.

    • AreaKode@lemmy.worldEnglish
      0·
      4 months ago

      Still, always good practice to change your password after this sort of leak. However unlikely it is that someone could access your account, it’s never a bad idea.

  • Sivilian@lemmy.zipEnglish
    0·
    4 months ago

    I am curious as to why people thing Plex is self hosting if Plex can change how your server functions? I have never personally considered it self hosting but do others still think it is?