Wdym it's like a couple of clicks

Still, always good practice to change your password after this sort of leak. However unlikely it is that someone could access your account, it's never a bad idea.

I mean, jellyfin is absolutely even.more of a security nightmare than Plex, with multiple unfixed CVEs IIRC (software, not website or forum)

I use jellyfin also, but I only trust it not exposed to the internet at all. That is one very big area of improvement for them.

That and subtitle syncing.

Seems unlikely that this happened. Most people on Lemmy despise Plex and forgive all the shortcomings of Jellyfin

I'd love to switch. I would do it right now, but the problem is that Jellyfin's security isn't better if you open it up to the internet. For example, I'd have to set up a VPN for my remote users for proper security, and most of my users are in other states, not technically inclined, and watch on their TVs. I'd have to at least support a raspberry pi for them, or some sort of site to site VPN, and if it goes down, I'll be expected to fix it. On top of that, if I do a simple raspberry pi based VPN, it would be made even more complicated since they'd want it to work with their smart TVs.

Again, I really want to switch. But Jellyfin needs to fix their security issues before I can. I'm also happy with the way Plex is reporting this, it's above the standard "your data is lost" notifications.

Edit: here's a link to the related GitHub issue I've been following: https://github.com/jellyfin/jellyfin/issues/5415

And @Saik0Shinigami@lemmy.saik0.com has a great thread explaining more: https://lemmy.today/comment/18923504

Plex followed best practices and made sure that in the event of a data breach your accounts were safe, and alerted us promptly to the breach and reassured us that nothing private/of value was compromised.

JellyFin knowingly leaves multiple API endpoints with zero authentication.

I know which one I prefer, and it’s not the one with gaping security holes marked as “won’t fix”.

Even is plex is "bad" now, it's still years ahead of jellyfin.

Leave Plex

alone!

Plex hasn't been getting better, but it still does what I need. I have a lifetime pass from years ago. If I was starting today I would be a lot less inclined to pay for Plex though. They keep adding things I don't want.