86
Plex Announcement: Important Notice of Security Incident (forums.plex.tv)
submitted 1 year ago by to c/plex@lemmy.ca
13 comments fedilink hide all child comments
 

We have recently experienced a security incident that may potentially involve your Plex account information. We believe the actual impact of this incident is limited; however, action is required from you to ensure your account remains secure.

you are viewing a single comment's thread
view the rest of the comments
[+] 11 points 1 year ago (4 children)
[deleted]
  • permalink
  • fedilink
  • source
  • hideshow 4 child comments
    •
  • [–] 8 points 1 year ago* (last edited 1 year ago) (3 children)

    No security guy, but if the passwords were just hashed and not salted it's not ideal. Better than plaintext for sure though.

    EDIT: Plex employee confirmed they do salt (and pepper, which I'm less familiar with), the last time they were hacked and had passwords exposed, fwiw.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 6 points 1 year ago* (last edited 1 year ago) (1 child)

    If they were hashed then they were likely salted too, not much reason to not do both. Especially since they said "in accordance with best practices", otherwise they're just lying lol. They probably just didn't want to make the announcement too technical.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
    • load more comments (1 reply)