Which doesn’t have half the features and crap security compared to Plex/Emby.
Comment on 4 reasons Plex is turning into the thing it replaced
explodicle@sh.itjust.works 4 weeks agoIt’s really nice of them to fight the good fight while I use Jellyfin instead.
AtariDump@lemmy.world 4 weeks ago
xthexder@l.sw0.com 4 weeks ago
The security thing is ironic because my personal Jellyfin server (nor anything else on it) has been hacked, but Plex itself has had their database leaked recently. It’s actually the main reason I switched because I don’t like their auth servers being a giant common target.
kieron115@startrek.website 4 weeks ago
From their blog post about it:
An unauthorized third party accessed a limited subset of customer data from one of our databases. While we quickly contained the incident, information that was accessed included emails, usernames, securely hashed passwords and authentication data. Any account passwords that may have been accessed were securely hashed, in accordance with best practices, meaning they cannot be read by a third party.
The passwords were hashed and, I’m inferring from their language, salted per-user as well. Assuming a reasonable length password (complexity doesn’t matter much here, what we want is entropy) it would take a conventional computer tens to hundreds of millions of years to crack one user’s password.
xthexder@l.sw0.com 4 weeks ago
Yeah, I’m not really worried about it. I changed my password and moved on. It’s just that hackers have every reason to try and exploit Plex, while individual servers are hardly worth someone’s time and effort to go after when the payoff is maybe 1-2 usernames and emails
AtariDump@lemmy.world 4 weeks ago
… my personal Jellyfin server (nor anything else on it) has been hacked…
And I’ve never been attacked by a bear while wearing my goose feather headdress.
xthexder@l.sw0.com 4 weeks ago
Call it survivorship/selection bias if you want, but basically every hack I’ve been exposed to is from centralized servers getting exploited that server millions of people. Plex, along with any other public facing service with lots of users, receives targeted attacks constantly. All my server receives is automated bots looking for 10-year-old Wordpress .php exploits (I don’t even run php on my server).
brucethemoose@lemmy.world 4 weeks ago
You may (half) joke, but MPAA attention on Jellyfin would suck.
explodicle@sh.itjust.works 4 weeks ago
I’d like to call this “the Ubuntu buffer”.
tatterdemalion@programming.dev 4 weeks ago
Maybe a dumb question: What exactly could go wrong? Has the MPAA done anything to stifle Kodi?
brucethemoose@lemmy.world 4 weeks ago
www.comparitech.com/kodi/kodi-piracy-decline/
digital-digest.com/news-64644-Netflix-Amazon-Join…
And this is with Kodi furiously distancing itself from pirates at the time.
Attacks don’t have to be direct. Though they absolutely can be, too.