235
Important Notice of Security Incident (forums.plex.tv)
submitted 1 year ago by to c/selfhosted@lemmy.world
102 comments fedilink hide all child comments
 

Additional read: https://www.bleepingcomputer.com/news/security/plex-tells-users-to-reset-passwords-after-new-data-breach/

you are viewing a single comment's thread
view the rest of the comments
[–] 18 points 1 year ago* (10 children)

I'd love to switch. I would do it right now, but the problem is that Jellyfin's security isn't better if you open it up to the internet. For example, I'd have to set up a VPN for my remote users for proper security, and most of my users are in other states, not technically inclined, and watch on their TVs. I'd have to at least support a raspberry pi for them, or some sort of site to site VPN, and if it goes down, I'll be expected to fix it. On top of that, if I do a simple raspberry pi based VPN, it would be made even more complicated since they'd want it to work with their smart TVs.

Again, I really want to switch. But Jellyfin needs to fix their security issues before I can. I'm also happy with the way Plex is reporting this, it's above the standard "your data is lost" notifications.

Edit: here's a link to the related GitHub issue I've been following: https://github.com/jellyfin/jellyfin/issues/5415

And @Saik0Shinigami@lemmy.saik0.com has a great thread explaining more: https://lemmy.today/comment/18923504

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 10 child comments
    •
  • [–] 5 points 1 year ago

    My big complaint with Jellyfin is that their documentation showed a “fast forward” hotkey that convinced me to switch from Plex, and when I started it up it was a misnamed “jump forward five seconds” button instead.

    It’s still better for my needs, but I remain angry.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 7 points 1 year ago (2 children)

    Jellyfin is great... As long as you're the only one who needs to access the server. I've switched to using Jellyfin myself, but I still run Plex for others to access.

    I've found that I get a smoother playback experience on Jellyfin, but even outside of potential security issues, there are a still couple of features I miss from Plex.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 4 points 1 year ago (1 child)

    What are those features?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 3 points 1 year ago

    One was automatic collections, but the plugin for this has since been updated, and the bug I was experiencing has been fixed. The one remaining feature that I'm missing is user ratings for media. On Plex I have automatic collections of movies that I've rated four and five stars, and it's quite useful.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 5 points 1 year ago (3 children)

    Most of these require some form of random id to exploit, which leaves you either brute forcing ids or brute forcing a user account

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 3 points 1 year ago

    I mean, that's fine, but it's still an issue and a risk that would cause me to want to use VPN for remote viewing. It doesn't seem like security is Jellyfin's priority at the moment, not that it's Plex's either, but it's not to a place where it's worth it to switch from a security standpoint, personally.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 2 points 1 year ago

    Thank you for that issues link. I keep trying jellyfin every now and then and I run into issues with general bugginess so I haven't been able to switch. Seeing that it's kinda full of security holes makes me even more reticent.

  • permalink
  • fedilink
  • source
  • parent