We have recently experienced a security incident that may potentially involve your Plex account information. We believe the actual impact of this incident is limited; however, action is required from you to ensure your account remains secure.

all 29 comments

sorted by: hot top controversial new old
[–] 46 points 1 year ago (17 children)

Plex: requires external account to use their self hosted software.

Also Plex: oops lol

  • source
  • hideshow 17 child comments
  • [–] [S] 33 points 1 year ago (16 children)

    Jellyfin looks better to people by the hour.

  • source
  • parent
  • hideshow 16 child comments
  • [–] 21 points 1 year ago (7 children)

    I’m no Plex fanboy but from what I’ve read Jellyfin auth leaves a lot to be desired from a security standpoint, particularly if you are opening it to the web. And chances are if your jellyfin server was breached, you wouldn’t get an email about it.

  • source
  • parent
  • hideshow 7 child comments
  • [–] 14 points 1 year ago (6 children)

    It's simple, don't open it to the web directly.

    If you have the ability to make your server public you also have the ability to put Wireguard on it, and after initial setup it's trivial to use it.

    You shouldn't really host publicly any service that you won't be monitoring regularly for security incidents.

  • source
  • parent
  • hideshow 6 child comments
  • [–] 22 points 1 year ago (4 children)

    But I like sharing my plex library with people.

    Jellyfin’s gonna be a bigger project than I thought I guess.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 14 points 1 year ago (7 children)

    Until you try to share your library with someone and have to parse terms like reverse proxy or figure out how your mom can install a vpn on her Roku

  • source
  • parent
  • hideshow 7 child comments
  • [–] 4 points 1 year ago (4 children)

    If you can set up Jellyfin, you can set up a reverse proxy using Caddy. It's dead easy.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 4 points 1 year ago (2 children)

    And you also need a public domain. So I have to register, pay for, and configure that as well.

    Recognize that we're on like step 7 of "just use Jellyfin instead of Plex"

  • source
  • parent
  • hideshow 2 child comments
  • [–] 17 points 1 year ago

    I'm less fussed about a data breach that might require a password change than I am that 3rd parties have access to internal databases. Play history and library contents could be a lot of trouble for folks if that data is ever breached (assuming it is even kept by PleX which I hope it isn't).

  • source
  • [–] 12 points 1 year ago

    I just need Plex to survive until I can replace it with Jellyfin.

  • source
  • [–] 9 points 1 year ago

    I really don't understand all the hate. It's like this weird echo chamber where everybody's like fuck it I'm gone! Like you're all just waiting for a fucking reason to switch if you want to switch switch. Personally for people like me without the time or inclination Plex is a fucking godsend. So I have to change my password big deal.

  • source
  • [–] 4 points 1 year ago (2 children)
  • [–] 3 points 1 year ago

    It's unfurtunate that Jellifin or Emby is not available on as much smart TV platforms as Plex. I tried Emby years ago and it was close to Plex ease of use, but it was still fairly new and not quite there and hopefully a lot better now.

  • source
  • [–] 3 points 1 year ago* (last edited 1 year ago)

    When this happens, I always forget to change the password through the server/localhost URL. Always gets confusing when I don't.

  • source
  • [+] 3 points 1 year ago* (last edited 1 year ago) (1 child)
  • [–] -1 points 1 year ago

    Still gonna use plex. Still gonna lol at jellyplebs.

  • source