Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Plex Security Incident

links.plex.tv

Post reply on HN
Print view View original

11–20 of 94 posts

Re: Plex Security Incident

#11

Post by defrost »

gchamonlive wrote: post #4
BowBun wrote: post #3

Not necessarily related, but I'll take the opportunity to share my dislike of this company. Like others, they built a loyal following around a set of features provided, no questions asked, to stream your content to your own devices. Over the last couple of years, Plex has continued to strip functionality, add paywalls, make deals with publishing companies, and take other actions that firmly put them in the 'enshittif…

Do I still need to mess with filenames in order to have jellyfin pick them up to create the library?

Not if:

* they already have peer filename.nfo files with TVDB | IMDB | TMDB ID's

* not if they have scene standard names AND are not ambiguous media names (eg: Utopia - which of the 5 possible series do you mean?)

But these are issues all media libraries face.

Group series episodes in per series (or even per season) folders and include a tvshow.nfo file with any IDs.

eg:

  {"tmdb":"328","imdb":"tt0983200","tvdb":"82616","tvrage":"7565","wikidata":"Q6805564"}
  82616
  tt0983200
  328
  328
  tt0983200
  82616
  7565
  Q6805564
  1989-05-08
is over kill for Media Watch https://www.themoviedb.org/tv/328-media-watch

which just leaves the issue of TheMovieDB being weak on metadata for that series .. but can be completed from theTVDB https://www.thetvdb.com/series/media-watch

Re: Plex Security Incident

#12

Post by BowBun »

johnbellone wrote: post #7
BowBun wrote: post #3

Not necessarily related, but I'll take the opportunity to share my dislike of this company. Like others, they built a loyal following around a set of features provided, no questions asked, to stream your content to your own devices. Over the last couple of years, Plex has continued to strip functionality, add paywalls, make deals with publishing companies, and take other actions that firmly put them in the 'enshittif…

I have a “lifetime pass”. I’ve noticed some of these “features” creeping into the ecosystem (bloat), but I haven’t actually seen any stripped functionality. For the most part, it works as advertised. That being said, a lot of my mates are moving to Jellyfin. Nothing but good things from them.

For lifetime pass owners, I think you've dodged the features they've put paywalls up for. The big one is preventing free accounts from streaming to shared user libraries. So if you have your pass + 5 buddies sharing their plexes (and they don't have Plus), you cannot view their content I believe.

Re: Plex Security Incident

#13

Post by unethical_ban »

gchamonlive wrote: post #4
BowBun wrote: post #3

Not necessarily related, but I'll take the opportunity to share my dislike of this company. Like others, they built a loyal following around a set of features provided, no questions asked, to stream your content to your own devices. Over the last couple of years, Plex has continued to strip functionality, add paywalls, make deals with publishing companies, and take other actions that firmly put them in the 'enshittif…

Do I still need to mess with filenames in order to have jellyfin pick them up to create the library?

Soemtimes I have needed to rename files, but to me it is both sensible (how else to recognize a show, maybe a metadata file) and totally worth it.

I don't want to need to have a centralized account to access my media library on my device.

I don't want to have to pay monthly to enable hardware transcoding.

Re: Plex Security Incident

#14

Post by whiterook6 »

I am a faithful Plex lifetime user and have never had problems.

That said, I shouldn't be blinded by convenience. I hear jellyfin is a good alternative. Can someone share

- how easy is it to administer for clients outside of my network or possibly even outside my country?

- how good is the app support? I transcode all of my media to AAC and h264 for compatibility

-what about for streaming music? I really like Plex amp

- what do you like the most about jellyfin

- what do you miss most about Plex?

Thank you.

Re: Plex Security Incident

#15

Post by nick_ »

gchamonlive wrote: post #4
BowBun wrote: post #3

Not necessarily related, but I'll take the opportunity to share my dislike of this company. Like others, they built a loyal following around a set of features provided, no questions asked, to stream your content to your own devices. Over the last couple of years, Plex has continued to strip functionality, add paywalls, make deals with publishing companies, and take other actions that firmly put them in the 'enshittif…

Do I still need to mess with filenames in order to have jellyfin pick them up to create the library?

Yes. This is the flaw in Jellyfin that makes it a non-starter for me. One time I spent like two hours updating all the metadata, and then some strangely worded button reset it all. Haven't used it since.

Re: Plex Security Incident

#16

Post by magicalhippo »

BowBun wrote: post #3

Not necessarily related, but I'll take the opportunity to share my dislike of this company. Like others, they built a loyal following around a set of features provided, no questions asked, to stream your content to your own devices. Over the last couple of years, Plex has continued to strip functionality, add paywalls, make deals with publishing companies, and take other actions that firmly put them in the 'enshittif…

I like Jellyfin, but I keep using Plex for two reasons.

First is subtitle support is quite limited in comparison. It fails more often than it works for me.

Second is the lack of skipping.

This is with the Android TV client, haven't really tried the others.

Re: Plex Security Incident

#17

Post by mr90210 »

Someone1234 wrote: post #9

> Any account passwords that may have been accessed were securely hashed, in accordance with best practices, meaning they cannot be read by a third party. I am glad they were hashed, but that's a misleading statement. The point of hashing is to slow an attacker down, even with full best security practices (e.g. salt + pepper + argon2 w/high factors) they can still be reverse engineered. It is a matter of when , not i…

> (e.g. salt + pepper + argon2 w/high factors) they can still be reverse engineered. It is a matter of when, not if

How much compute/gpu and hard dollars would hackers need in order to reverse engineers those stollen passwords?

Re: Plex Security Incident

#18

Post by pixl97 »

Someone1234 wrote: post #9

> Any account passwords that may have been accessed were securely hashed, in accordance with best practices, meaning they cannot be read by a third party. I am glad they were hashed, but that's a misleading statement. The point of hashing is to slow an attacker down, even with full best security practices (e.g. salt + pepper + argon2 w/high factors) they can still be reverse engineered. It is a matter of when , not i…

Technically you may have to burn more entropy than exists in the visible universe, so its a possible if in the case of the right hash and luck.

Re: Plex Security Incident

#20

Post by mvdtnz »

Someone1234 wrote: post #9

> Any account passwords that may have been accessed were securely hashed, in accordance with best practices, meaning they cannot be read by a third party. I am glad they were hashed, but that's a misleading statement. The point of hashing is to slow an attacker down, even with full best security practices (e.g. salt + pepper + argon2 w/high factors) they can still be reverse engineered. It is a matter of when , not i…

For all practical purposes what you're saying is just wrong.
Post reply on HN