you are viewing a single comment's thread
view the rest of the comments
[–] 13 points 1 year ago (3 children)

Plex followed best practices and made sure that in the event of a data breach your accounts were safe, and alerted us promptly to the breach and reassured us that nothing private/of value was compromised.

JellyFin knowingly leaves multiple API endpoints with zero authentication.

I know which one I prefer, and it’s not the one with gaping security holes marked as “won’t fix”.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 5 points 1 year ago (2 children)

    People don't seem to understand that no-one can reasonably stop a breach today.
    The question is whether the attackers got anything of value and how easy they got in.

  • source
  • parent
  • hideshow 2 child comments