PLEX.tv - data breach

Software
#1

I just received an email from Plex about a data breach they had. Their website is barely reachable right now.

More about the data breach:

1 Like
#2

Looks like they did everything right in a case like this. The site is being hammered with password change requests, I suspect.

1 Like
#3

Yep, just changed mine.

#4

Yes, looks like it.

It will be interesting how this story will develop, but transparency definitely is the only way to deal with data breaches.

#5

I guess 99.99999999999% of the users are using a unique password for Plex or any other service. :slight_smile:

#6

my password had the word “plex” in it, so yes. :grinning:

#7

plex1234 or the more secure plex1234567?

4 Likes
#8

mirror universe secure.

“plexxelp”

I have now added an actual mirror to beef it up.

“plex|xelp”

3 Likes
#9

I have first hand knowledge of someone catching account shenanigans from outside of the USA on their Plex on Aug 16 so the breach is at least 10 days old.

#10

I have to say, one of the things that irks me about Plex is the fact that you have to sign in on a website to access a local library on your own network.

But I’m not aware of a good alternative. :slight_smile:

#11

I found similar behavior with Capture One software for photo editing last week when my Comcast network was wonky for a time.

#12

Agree 100% @webwalrus.
I would like to understand the reasoning behind that.

#13

Isn’t it a licensing model that gives them the ability to cut you off?

1 Like
#14

I think it is both for licensing and the way Plex apps authenticate to your server.

#15

You can at least enable local access to your server so that even if your internet is down local devices can access it without going via the internet. The ironic part is you have to enable this while you have internet access.

#16

That would make sense if you were paying Plex for their Plex Pass. But even if you’re using the free “local-only” mode, you need to login via their server.

Like so many things in technology, “if only you had thought to do this thing that you would never think to do until you’re having the problem it addresses, at which point it’s too late”. :slight_smile:

#17

My understanding is that it is the way that they can ensure your devices can find your local server. In other words, the local server connects to Plex’s server and says “hey, I’m here.” Then when your other local devices need to connect to your server, they connect to the Plex’s remote server and that redirects then to your local server. This is a more and more common model as devices don’t always find each other on the same network. And well, some people have wonky networks, which this usually works around. Its a customer satisfaction thing. The non-technical customer can always get it to work–except when there is no internet access.

And well, I suppose marketing likes it as well. If you already have an account, it is only one small step to pay a fee to get additional features like remote streaming, etc. So, yeah, it is (probably) not only convenience, but that is the justification for it.

2 Likes
#18

…Laughs in Kodi… :grinning:

[Lifetime Pass Plex Member but never uninstalled Kodi from my server]

#19

All kidding aside, would you recommend Kodi as a useful alternative to Plex?

#20

Kodi is great Your app connects directly to your server without going through a third party (like Plex). The only reason I ever switched to Plex was because of the inability to install Kodi software on my iOS devices once I quit jailbreaking. For whatever reason Apple doesn’t allow Kodi in the AppStore yada yada yada. Plex is superior for “outside the house” streaming if you do that.