Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Plex: Important notice of a potential data breach

news.ycombinator.com

Post reply on HN
Print view View original

181–190 of 194 posts

Re: Plex: Important notice of a potential data breach

#181

Post by fomine3 »

Thews wrote: post #154
koheripbal wrote: post #144

Earlier quoted context omitted.

You're being a bit generous with credit to them. We have no idea how long the malicious actors had access (not do they it seems), nor what depth of access they had. I turned off my server until they have had a chance to verify that no malicious software updates have been pushed. With regard to complex passwords, Plex is one of those accounts that using a random password is quite cumbersome since my kids and I are oft…

There is no need for a "complex password" just use a passphrase and don't reuse it.

it's still annoying to type on TV OSD keyboard by cursor

Re: Plex: Important notice of a potential data breach

#182

Post by gadders »

rograndom wrote: post #172
gadders wrote: post #89

Earlier quoted context omitted.

I just use Universal Media Server now and the built in media-browser on my Samsung TV. It's a bit janky but it works. I've tried using Plex before and while the UI is nice, they don't seem to be able to write a video transcoder that doesn't have massive stuttering in it.

It's using ffmpeg. It's limited by the CPU/GPU on the server. You can adjust the options to have it encode faster or higher quality.

Yeah, I'm it's solvable if dug under the covers and spent hours tweaking and running between the PC in the study and the TV in the living room, but Universal Media Server just works.

Re: Plex: Important notice of a potential data breach

#183

Post by seanw444 »

gadders wrote: post #125
seanw444 wrote: post #117

Earlier quoted context omitted.

The build steps were a nightmare. That's mostly the fault of Samsung, but it was still very off-putting. Unless I was doing something wrong. It took me a couple full nights after work to finally get it done and on the TV, trying to set up Samsung's developer tools on multiple different machines. I dread having to do it again.

Does it work OK? Was it worth the effort?

Yeah it's been working perfectly for me ever since I set it up last fall (maybe it was winter, can't remember). At least half a year. I'd say it's worth the effort, but the process still sucks.

One of the things I remember making it real difficult was that the UI of Samsung's dev tools app assumes you have the default light theme in GTK (or whatever widget toolkit they're using), and since I had a different dark theme, I couldn't see any of the icons.

So then I switched to one of my devices that were running Ubuntu 20.04 with Gnome, where the app would not launch due to something about "pixbuf". Side note - I'd had that particular error so many times in Ubuntu with various apps that it's the sole reason I eventually learned Arch (and tiling window managers), and haven't looked back since.

I finally managed to get it to launch and work correctly on Xubuntu running on my girlfriend's very, very old laptop that takes about 8 minutes to boot to full speed. So save yourself the headache, and run the Samsung dev tools app on an unmolested Linux installation, with no special theming, that is not vanilla Ubuntu.

Re: Plex: Important notice of a potential data breach

#184

Post by gadders »

seanw444 wrote: post #183
gadders wrote: post #125

Earlier quoted context omitted.

Does it work OK? Was it worth the effort?

Yeah it's been working perfectly for me ever since I set it up last fall (maybe it was winter, can't remember). At least half a year. I'd say it's worth the effort, but the process still sucks. One of the things I remember making it real difficult was that the UI of Samsung's dev tools app assumes you have the default light theme in GTK (or whatever widget toolkit they're using), and since I had a different dark them…

I would if I had one. I'm windows-only currently. I guess I could spin up a VM but then I have networking issues...

Thanks for the feedback.

Re: Plex: Important notice of a potential data breach

#185

Post by c0nsumer »

selykg wrote: post #95
c0nsumer wrote: post #93

Earlier quoted context omitted.

That's the problem... I've signed into my server directly (local URL) and it's still not happening. I sign in successfully, my server is listed in the left pane, but when clicking it I'm informed I don't have access. I can't even get into its settings.

Weird. I'm on a Mac, so this might be different for whatever platform you're running it on. But I click the Plex server icon in the menu bar, "Open Plex" which just takes you to the admin screen. It was "configured" but not signed in. So, I clicked the user bubble in the upper right, then Sign In at the bottom. This took me to the usual sign in page, which errored the first time, but succeeded the second time. Not su…

Okay, here's how friggin' ridiculous this is... I got this from a coworker...

I access Plex normally via an internal hostname. For the life of me I couldn't see any settings and sign-in would basically loop. Coworker tells me he's been fighting with it as well and it for worked once he used an IP instead of hostname. I do the same and bam, I can reclaim my server.

Sheesh.

(Note, I have Plex running on a Synology NAS, so no desktop icon.)

Re: Plex: Important notice of a potential data breach

#186

Post by c0nsumer »

danielx wrote: post #97
c0nsumer wrote: post #88

Earlier quoted context omitted.

This is exactly what I had happen as well. I'm going to give it some time. I also even went through these steps ( https://support.plex.tv/articles/204281528-why-am-i-locked-o... ) without success.

It didn't work for me after restarting with a new claim and when i checked the preferences it contained `PlexOnlineToken=""`. After removing the attribute entirely it was able to successfully reclaim the server.

So a coworker suggested I try accessing my Plex instance by internal IP, not internal hostname. And that... worked. When using hostname, the way I always had for everything else, it'd show that I didn't have access to the server.

Re: Plex: Important notice of a potential data breach

#187

Post by selykg »

c0nsumer wrote: post #185
selykg wrote: post #95

Earlier quoted context omitted.

Weird. I'm on a Mac, so this might be different for whatever platform you're running it on. But I click the Plex server icon in the menu bar, "Open Plex" which just takes you to the admin screen. It was "configured" but not signed in. So, I clicked the user bubble in the upper right, then Sign In at the bottom. This took me to the usual sign in page, which errored the first time, but succeeded the second time. Not su…

Okay, here's how friggin' ridiculous this is... I got this from a coworker... I access Plex normally via an internal hostname. For the life of me I couldn't see any settings and sign-in would basically loop. Coworker tells me he's been fighting with it as well and it for worked once he used an IP instead of hostname. I do the same and bam, I can reclaim my server. Sheesh. (Note, I have Plex running on a Synology NAS,…

Geez...

How do you like running it on a NAS? I'm considering a Synology in the future to run mine off of. Right now it's all just an external drive on my Mac mini. It works okay but the Mac is now 8 years old so it's uh... showing it's age.

Re: Plex: Important notice of a potential data breach

#188

Post by smaccona »

poglet wrote: post #176
owlbynight wrote: post #173

Earlier quoted context omitted.

I find it hard to believe that most people on HN reuse the same e-mail and password. That practice has always been known to be stupid. There's a whole thing about it in the movie Hackers... from 1995. In 2022, your data isn't safe. It's widely known your data isn't safe. You need to take steps to make it matter less when its mishandled. Don't get me wrong, the Plex infra team should feel bad about themselves, but if…

What's the best way to use unique emails. I get that Apple has the 'Hide my Email' feature but it's not clear to me how to best use it, especially outside of Apple ie. Where do I find a list of emails that it's created for me and what they were used for. Temporary email services don't seem helpful either if you need to go through password reset processes or receive emails after the address has been removed. Do people…

To answer your specific question about finding the email addresses you have created via HideMyEmail:

- open Settings - tap your username/name at the top of Settings - tap iCloud - tap Hide My Email - you can look for any emails or matches you want

Re: Plex: Important notice of a potential data breach

#189

Post by Zhyl »

MikusR wrote: post #178
Zhyl wrote: post #86

Earlier quoted context omitted.

No app for webOS (although emby exists). You can, of course, use the Web player over your local network.

Just released on Official store. https://jellyfin.org/posts/webos-july2022/

Wow, they literally released it a few days after I checked for it :D

Re: Plex: Important notice of a potential data breach

#190

Post by jjcon »

arrakeen wrote: post #127
koheripbal wrote: post #61

Earlier quoted context omitted.

This is not correct. I've tried the LAN no-login settings and it does not work for many devices (Roku/smart tv/phones). They also fail if you're not on the same subnet as Plex. For this infuriating reason, moving off of Plex is on my to-do list.

yup--the weekend my internet went out was a real eye-opener and a number of things in my house got the axe including plex. i use kodi now and while its UX is nowhere near as good as plex, at least it works with a LAN-only connection

Interesting - I don’t have any issues accessing my server without internet, the default for me seems to be run local and then via internet.
Post reply on HN