Important Notice of Security Incident
forums.plex.tv
We have recently experienced a security incident that may potentially involve your Plex account information. We believe the actual impact of this incident is limited; however, action is required from you to ensure your account remains secure. What happened An unauthorized third party accessed a limited subset of customer data from one of our databases. While we quickly contained the incident, information that was accessed included emails, usernames, securely hashed passwords and authentication ...

We have recently experienced a security incident that may potentially involve your Plex account information. We believe the actual impact of this incident is limited; however, action is required from you to ensure your account remains secure.

      • maxprime@lemmy.mlEnglish
        21·
        5 days ago

        I’m no Plex fanboy but from what I’ve read Jellyfin auth leaves a lot to be desired from a security standpoint, particularly if you are opening it to the web. And chances are if your jellyfin server was breached, you wouldn’t get an email about it.

        • sanpo@sopuli.xyzEnglish
          162·
          5 days ago

          It’s simple, don’t open it to the web directly.

          If you have the ability to make your server public you also have the ability to put Wireguard on it, and after initial setup it’s trivial to use it.

          You shouldn’t really host publicly any service that you won’t be monitoring regularly for security incidents.

      • akilou@sh.itjust.worksEnglish
        14·
        5 days ago

        Until you try to share your library with someone and have to parse terms like reverse proxy or figure out how your mom can install a vpn on her Roku

        • Nora@lemmy.mlEnglish
          51·
          4 days ago

          If you can set up Jellyfin, you can set up a reverse proxy using Caddy. It’s dead easy.

        • AtariDump@lemmy.worldEnglish
          3·
          4 days ago

          It amazes me how many people jump immediately to Jellyfin and A. Skip over Emby and B. Never ask what someone’s use case it.