Plex has been hacked. Change your passwords

Topic

New Reply

[Alex5723]

https://twitter.com/troyhunt/status/1562318321479204865

“Yesterday, we discovered suspicious activity on one of our databases. We immediately began an investigation and it does appear that a third-party was able to access a limited subset of data that includes emails, usernames, and encrypted passwords. Even though all account passwords that could have been accessed were hashed and secured in accordance with best practices, out of an abundance of caution we are requiring all Plex account to have their password reset. Rest assured that credit card and other payment data are not stored on our servers at all and were not vulnerable to this incident.”..

* I am using Plex media server with my home cinema system.

Didn’t get mail notification yet.

Plex site is down so no way to reset passwords.

• This topic was modified 2 years, 9 months ago by Alex5723.

1 user thanked author for this post.

bbearren

Reply | Quote

Replies

Why would anyone use a media server that requires login to remote servers to play local content.

 

I use kodi, works great.

Reply | Quote

Biiljoy wrote:

Why would anyone use a media server that requires login to remote servers to play local content. I use kodi, works great.

I tried Kodi.  Didn’t work so great for me; that’s why I use Plex.

Always create a fresh drive image before making system changes/Windows updates; you may need to start over!

We all have our own reasons for doing the things that we do with our systems; we don't need anyone's approval, and we don't all have to do the same things.

We were all once "Average Users".

Computer Specs

Reply | Quote

Alex5723 wrote:

Plex site is down so no way to reset passwords.

I usually stay signed in to Plex.  When I opened it, I signed out, then signed in, went to my account and changed my password.  Did the same on my NAS.  There is also an update available, which I did while I was there.

Always create a fresh drive image before making system changes/Windows updates; you may need to start over!

We all have our own reasons for doing the things that we do with our systems; we don't need anyone's approval, and we don't all have to do the same things.

We were all once "Average Users".

Computer Specs

1 user thanked author for this post.

Alex5723

Reply | Quote

https://support.plex.tv/articles/account-requires-password-reset/

Reply | Quote

Biiljoy wrote:

Why would anyone use a media server that requires login to remote servers to play local content.

 

I use kodi, works great.

Local server/NAS/external HDD, not remote…
Kodi hasn’t worked well for me in the last year.

ps. New versions of Kodi doesn’t support Android devices, smart TVs.. with Android 11+

https://www.askwoody.com/forums/topic/kodi-updates/#post-2429506

Reply | Quote

Biiljoy wrote:

Why would anyone use a media server that requires login to remote servers to play local content.

Plex, understandably, tries to upsell itself as a streaming platform.

However, many (most?) Plex Media Server users aren’t aware that – like TeamViewer – Plex Media Server can be used purely locally without needing to handshake with an external Plex server for login/authentication, i.e. it can be configured as ‘LAN-only’.

The How-To Geek has a How to Use Plex Media Server Without Internet Access article which explains this far better than I could.

Just be aware that the article is now 2 years old and Plex has apparently added a GDM (G’Day Mate) mode for local discovery since the HTG article. Have a look at this Plex article for Advanced network settings.

(I have a really old Acer Aspire One netbook (maxed out with massive 2GB RAM!) with USB-attached HDD. It’s configured to run with the lid closed and all it does is run Plex Media Server in LAN-only mode… and has done for the last 3 years. It’s a bit slow these days… but it’s fanless, so totally silent. I’m planning on replacing it with a Raspberry Pi 4 model B 8GB when [if] they ever come back into stock.)

Hope this helps…

1 user thanked author for this post.

Alex5723

Reply | Quote

If you use a 3rd party sign in service (Google, Apple, Facebook..) you are not affected.

https://old.reddit.com/r/PleX/comments/wwg592/so_what_else_got_leaked/ilo9f8i/

Reply | Quote