I use Jellyfin. I just give them the IP and they click their name, then I whitelist them.

I choose to believe this lol

It’s such a pain. On the one hand, central account management has allowed me to easily explain to and sign up friends and family who don’t trust anyone except Google/Facebook/Netflix/etc but I also hate having these breaches happen.

I started converting an old email address years ago to a new email hidden behind an email redirect due to the amount of breaches the old one was involved in. An absolute pain to do but now I can just update the proxy email address in the face of a breach like this.

If they were hashed then they were likely salted too, not much reason to not do both. Especially since they said "in accordance with best practices", otherwise they're just lying lol. They probably just didn't want to make the announcement too technical.

No security guy, but if the passwords were just hashed and not salted it's not ideal. Better than plaintext for sure though.

EDIT: Plex employee confirmed they do salt (and pepper, which I'm less familiar with), the last time they were hacked and had passwords exposed, fwiw.

I seem to recall a lot of people saying this is exactly what they were worried about when Plex forced everyone to central authentication servers.

Cant it just play from FTP/smb/lfs/webDAV?

Good. I was annoyed that I had to Bluetooth to my stereo from my phone because they took music out of my Shield app and don't have Plexamp available.

What issues do you have with jellyfin?

What will come back?

Plex appears to be going downhill, not improving

I’m not. Everyone I want to let in has their own WireGuard credentials, each one limited what they can reach once connected.

Which is totally fine if you're the only user of your server, but for those of us who host their server for their whole family (including less tech minded people), that is very far from an actual option.

Well the hope is that Plex continues to improve, and that doesn't happen.

Do... Do you which community you're in?

I never use their remote access methods at all. WireGuard works fine.

I have literally never had a problem with jellyfin. It works great on everything. It slices, dices, cures all that ails you.

My biggest issue with Jellyfin is that remote access requires additional steps (which many of my family would not be comfortable doing on their end) and even if that hurdle didn't exist, it would still be significantly less secure than providing access through Plex.

Well the hope is that Jellyfin continues to improve, and that doesn't happen.

I'll start using Plex when Jellyfin stops working consistently.

lol

I'll stop using Plex when Jellyfin starts working consistently

Well it's kind of good to see them listening to user feedback.