Technology

77084 readers

2758 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related news or articles.
Be excellent to each other!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
Check for duplicates before posting, duplicates may be removed
Accounts 7 days and younger will have their posts automatically removed.

Approved Bots

founded 2 years ago

MODERATORS

L3s@lemmy.world

enu@lemmy.world

technopagan@lemmy.world

L4s@lemmy.world

L3s@hackingne.ws

L4s@hackingne.ws

358

4 reasons Plex is turning into the thing it replaced (www.androidauthority.com)

submitted 19 hours ago by fne8w2ah@lemmy.world to c/technology@lemmy.world

102 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] explodicle@sh.itjust.works 26 points 16 hours ago (2 children)

It's really nice of them to fight the good fight while I use Jellyfin instead.

[–] brucethemoose@lemmy.world 15 points 16 hours ago (1 children)

You may (half) joke, but MPAA attention on Jellyfin would suck.

[–] explodicle@sh.itjust.works 10 points 16 hours ago

I'd like to call this "the Ubuntu buffer".

[–] AtariDump@lemmy.world 1 points 14 hours ago (1 children)

Which doesn’t have half the features and crap security compared to Plex/Emby.

[–] xthexder@l.sw0.com 12 points 11 hours ago* (last edited 11 hours ago) (1 children)

The security thing is ironic because my personal Jellyfin server (nor anything else on it) has been hacked, but Plex itself has had their database leaked recently. It's actually the main reason I switched because I don't like their auth servers being a giant common target. (Also, technically it theoretically means Plex employees can just let themselves in to people's private servers)

[–] kieron115@startrek.website 2 points 6 hours ago* (last edited 6 hours ago) (1 children)

From their blog post about it:

An unauthorized third party accessed a limited subset of customer data from one of our databases. While we quickly contained the incident, information that was accessed included emails, usernames, securely hashed passwords and authentication data. Any account passwords that may have been accessed were securely hashed, in accordance with best practices, meaning they cannot be read by a third party.

The passwords were hashed and, I'm inferring from their language, salted per-user as well. Assuming a reasonable length password (complexity doesn't matter much here, what we want is entropy) it would take a conventional (i.e. not quantum) computer tens to hundreds of millions of years to crack one user's password.

[–] xthexder@l.sw0.com 3 points 6 hours ago

Yeah, I'm not really worried about it. I changed my password and moved on. It's just that hackers have every reason to try and exploit Plex, while individual servers are hardly worth someone's time and effort to go after when the payoff is maybe 1-2 usernames and emails