Live data from Hacker News

Plex: Important notice of a potential data breach

news.ycombinator.com

161–170 of 194 posts

Re: Plex: Important notice of a potential data breach

#162

Earlier quoted context omitted.

That's true, but I hate transcoding anyway so I just get HEVC when possible and play natively on Apple TV and co. (not casting).

Since you have an AppleTV, what is the advantage to you of using Plex instead of just an iTunes instance with Home Sharing turned on? Do you have non-Apple devices you're trying to stream to, or something else? I tried Plex years ago, and it wasn't to my liking because it was philosophically like Windows (Load the filename up with show information and constantly ping the internet for matches) instead of macOS (Metada…

The Apple TV was the last purchase a few months ago, and my main PC is Windows. I used iTunes as a media library years ago but Home Sharing never worked well for me, it regularly just didn't work (Bonjour for Windows' fault) or it lagged.

Ironically I like Plex & Infuse for the reason you hate them, I just give them files whose metadata is just their filename and they can match them to what they really are. No need to keep all the data in media container tags, and a thumbnail/poster that will be pixelated in a few years because something will scale it wrong.

Sony is a valid option given their love for DLNA but I just never really liked the tech. Hell, I have statically-reserved IPs & DNS-registered names for everything in my home.

EDIT: Oh, I forgot -- the main reason I moved off Plex (and would hate iTunes Home Sharing) is I don't leave my PC on. I switch it off daily and don't like to treat it like a server, and to keep using Plex would require setting up a NAS or something (I had my collection on a local SSD for a while).

Re: Plex: Important notice of a potential data breach

#163

Earlier quoted context omitted.

Since you have an AppleTV, what is the advantage to you of using Plex instead of just an iTunes instance with Home Sharing turned on? Do you have non-Apple devices you're trying to stream to, or something else? I tried Plex years ago, and it wasn't to my liking because it was philosophically like Windows (Load the filename up with show information and constantly ping the internet for matches) instead of macOS (Metada…

For me, the primary issue is that the Apple TV isn't good enough to be the most-commonly-used device driving the display. FireTV (4K version) wins the battle for the living room display (and it's not even close, with TiVo being 2nd and Apple TV a pretty distant 3rd). To some extent, it's self-reinforcing. Once the FireTV gets a lead, all it has to do to maintain/extend that lead is reasonably support playback of what…

Fair, I used Android TV (picked a TV with a decent chipset) before, and it played what I wanted well. The reason I got an Apple TV was because I loved Infuse on iOS, wanted some (easier) AirPods integration and found out all the apps I use are dramatically better on tvOS. Plus Android TV was starting to really annoy me with bugs and slowdowns.

I'm not in the US or mainland Europe so Fire and TiVo devices aren't really available or working well here, half their apps would just be blank.

Re: Plex: Important notice of a potential data breach

#164

Earlier quoted context omitted.

Plex doesn't require account linking IIRC, it's heavily suggested but you can just access Plex locally without an account.[1] But otherwise I've switched to Infuse[2] since then, it indexes sources reliably on its own (no manual editing though) and saves the entire need for a server if you use it with some cloud storage. Basically replaced my Plex server, with the added bonus of out-of-home streaming without needing…

I recently tried this on my setup, two Roku clients and a plex server. Despite my best efforts I could not get subtitles to work unless I had an account signed in with the preferred subtitle options configured for the account. Being hard of hearing, subtitles are a big deal. I wonder if this is an ADA violation?

It'll probably get answered with "Oops, this is an app bug and it's best if you log in anyway!"

What if you change the global accessibility settings to prefer subtitles? (Or just set SDH/CC somewhere in system settings) I know on Google/Android TV and Apple TV it default-enables subtitles in some apps.

Re: Plex: Important notice of a potential data breach

#165

Earlier quoted context omitted.

This is not correct. I've tried the LAN no-login settings and it does not work for many devices (Roku/smart tv/phones). They also fail if you're not on the same subnet as Plex. For this infuriating reason, moving off of Plex is on my to-do list.

I’m currently not logging in while using plex. Just providing that datapoint edit: You can also do this: https://support.plex.tv/articles/200890058-authentication-fo...

It is very client device dependent. And I found that when my internet went out, most devices would not work. But after several hours and some restarts it finally started working on some devices. I think this was because of some dns caching issues.

Re: Plex: Important notice of a potential data breach

#166
post #79

Earlier quoted context omitted.

Kodis always been the better option if you're remotely technical.

I ran Kodi for years, but "always"? * Kodi only works on my local network. It requires exposing my file shares on whatever VLAN my Kodi devices are on. * Kodi is a pain to configure. To point it at the aforementioned file shares, I need to copy an XML configuration file, and getting this onto every device is a chicken and egg problem. * Kodi requires each client to scan and sync the entire library at its CPU and band…

> Plex allows me to access my content at the office, while travelling, and to share with friends

Bold of you to trust an opaque corporation with access to your network and the data they can log through that. I wouldn't even trust Synology with their account quick access thing, as seamless as they claim it to be.

I don't really see remote access being secure without it being a self hosted VPN.

Re: Plex: Important notice of a potential data breach

#169

Like clockwork. I just joined recently and of course they have a breach. I knew I should've stayed away when they required an account for you to view your own media. Does Jellyfin let you get past this security issue?

From a comment further up, Jellyfin has an open issue on GitHub with a list of various security problems (most if not all of which come from Emby when they forked off of it). At least they're open about it, and working on it. It seems like running it on the public net might be a bad idea for the time being. But running it internally should be just fine. I personally run Jellyfin, and aside from security issues, I'm q…

Thanks for your response. If I set up Jellyfin just to run at home, without any need for connecting in from off-site, should I be okay security-wise? I went with Plex because my TV had built-in support for Plex, but now I think I'd like to delete my Plex account and switch to Jellyfin.

Re: Plex: Important notice of a potential data breach

#170

Earlier quoted context omitted.

I ran Kodi for years, but "always"? * Kodi only works on my local network. It requires exposing my file shares on whatever VLAN my Kodi devices are on. * Kodi is a pain to configure. To point it at the aforementioned file shares, I need to copy an XML configuration file, and getting this onto every device is a chicken and egg problem. * Kodi requires each client to scan and sync the entire library at its CPU and band…

> Plex allows me to access my content at the office, while travelling, and to share with friends Bold of you to trust an opaque corporation with access to your network and the data they can log through that. I wouldn't even trust Synology with their account quick access thing, as seamless as they claim it to be. I don't really see remote access being secure without it being a self hosted VPN.

My employer can see the data patterns, and I'm struggling to understand why I should care. My media library is entirely legit (I have a crate of 100-disc spindles in the closet) and if they really want to know what movies and music I have, so what? They could see anything I do on Spotify or YouTube as easily, and seeing me stream a bunch of incoming data will throw off far fewer red flags than plugging in an external drive with media files.

If they asked, I'd show them exactly what's up. They haven't, so they don't seem to mind.

It's not full access to my network, it's access to a carefully curated set of media files transcoded through a service. There are no tax returns, no resumes, no porn. Just FLAC, MP3, and MKV.

Post reply on HN