use zymotv instead of plex or emby
Is Emby somehow related to Plex? I use Emby, only because a few friends did and recommended it. I'd probably switch ti something more secure and/or open source given the right push.
A security incident that may involve your Plex account information
21–30 of 34 posts
Re: A security incident that may involve your Plex account information
#22I am a huge Plex power user; watching something at least once a day. Unfortunately, Plex is a bit of a mess these days - constantly pushing Live TV on us, requiring internet access to access local media (this is a killer whenever internet goes down), overly complex, clunky remote access (altho this is much better these days). But it still isn't bad enough to make me try and migrate. I love my local setup (Sonarr and…
Conversely I love the plex tv channels as an alternative to regular australian free to air- same as the lg channels. Easy way for me to turn my brain off and find a good documentary/educational show at the end of the day
Re: A security incident that may involve your Plex account information
#23Re: A security incident that may involve your Plex account information
#24PSA: If you are the owner of your Plex server and follow the _Sign out connected devices after password change- as they suggest, your server claim will also be expired. So you'll have to get a new claim from https://www.plex.tv/claim and set it on your server; through the PLEX_CLAIM env var if your setup involves Docker. They talk vaguely about it under _Common Issues_ but it wasn't on the original email, so I lost 1…
Another option is to do `ssh -L 32400:localhost:32400 ` and connect to http://localhost:32400/web, it will let you claim the server as it detects the connection being local.
Re: A security incident that may involve your Plex account information
#25Vault is more or less Old Testament, though, so if you're serious about zero trust, Zanzibar paper is a must-read!
Relationships lend nicely to AI agent stuff, where RBAC is putting you at a disadvantage. It's hard to express both direct and indirect access patterns in RBAC. For example, whenever agents would act on your, or your user's behalf within a clearly-defined scope (sic!) This is where traditional RBAC breaks down, whilst ReBAC really shines for expressing relationships between user/agent/system identities, thus greatly simplifying checking, scoping, audit.
[1]: https://developer.hashicorp.com/vault
[2]: https://openbao.org/
[4]: https://research.google/pubs/zanzibar-googles-consistent-glo...
Re: A security incident that may involve your Plex account information
#26Earlier quoted context omitted.
Or better yet use Jellyfin.
I’ve been considering switching to Jellyfin. I’m getting increasingly frustrated at just how badly Plex behaves for home set ups. Which is the entire point of installing something like Plex. Most annoying still, I’ve even paid for their premium products in the hope that it would make things behave better and it did not. The only reason these security incidents happen is because Plex try to extort home users. There is…
Re: A security incident that may involve your Plex account information
#27I roughly recall Plex is somewhat involved in the compromise. One of the Lastpass employees compromised via Plex that leads to Lastpass data breach if I'm not mistaken.
Re: A security incident that may involve your Plex account information
#28Once I saw Plex required an account even to self-host, it was a no-go for me. Stuff like this is why. (among other reasons, like "why should I go through a 3rd party for something I'm 100% hosting on my own hardware/network") I've been very happy with Jellyfin FWIW :)
I switched to Jellyfin last year and never looked back. The only thing I find lacking is the Apple TV App, I tried Swiftfin but it stutters the whole time when playing high quality UHD content. I tried Infuse and it works much better
Re: A security incident that may involve your Plex account information
#29I am a huge Plex power user; watching something at least once a day. Unfortunately, Plex is a bit of a mess these days - constantly pushing Live TV on us, requiring internet access to access local media (this is a killer whenever internet goes down), overly complex, clunky remote access (altho this is much better these days). But it still isn't bad enough to make me try and migrate. I love my local setup (Sonarr and…
Re: A security incident that may involve your Plex account information
#30I am a huge Plex power user; watching something at least once a day. Unfortunately, Plex is a bit of a mess these days - constantly pushing Live TV on us, requiring internet access to access local media (this is a killer whenever internet goes down), overly complex, clunky remote access (altho this is much better these days). But it still isn't bad enough to make me try and migrate. I love my local setup (Sonarr and…
Good news! You can whitelist exceptions by IP/subnet
Go into Plex Settings, then Settings > Network (show advanced). Scroll down to "List of IP addresses and networks that are allowed without auth"
"Comma separated list of IP addresses or IP/netmask entries for networks that are allowed to access Plex Media Server without logging in. When the server is signed out and this value is set, only localhost and addresses on this list will be allowed."
Put your local subnet and netmask into that (e.g. "192.168.1.1/255.255.255.0") and you should be all good
FYI, I also have "Secure Connections" set to "Preferred", but I don't know if that makes a difference for this or not