Started By
Message

re: Plex data breach

Posted on 8/25/22 at 6:00 pm to
Posted by CAD703X
Liberty Island
Member since Jul 2008
86709 posts
Posted on 8/25/22 at 6:00 pm to
quote:

You said your server was compromised, it wasn't.
wut? So I didn't have to rebuild my media collection because someone trashed my Plex account using a browser from India?

You do realize you can do alot of damage to your Plex server using a browser right?

I had my friend shut the computer down to minimize the damage from deleting media through the browser.

Not sure how anyone on here made the leap to my computer being compromised because it wasn't.

My Plex server/metadata/files, however, were trashed.

ETA anyone who doesn't think this can happen put your money where your mouth is and give me the login to your Plex account and let's see what I can do in Chrome.
This post was edited on 8/25/22 at 6:06 pm
Posted by efrad
Member since Nov 2007
18697 posts
Posted on 8/25/22 at 6:26 pm to
quote:

Not sure how anyone on here made the leap to my computer being compromised because it wasn't.



If you

1) Place files on a computer
2) Install software on that computer to access those files remotely
3) Grant permissions to an external account to use the functions of that software
4) Allow someone to compromise the external account
5) Witness that someone deleting files on your computer

then yes, your computer was compromised. But not because of Plex. Because of your poor security practices
This post was edited on 8/25/22 at 6:30 pm
Posted by dakarx
Member since Sep 2018
7833 posts
Posted on 8/25/22 at 6:41 pm to
quote:

you wanted Plex to verify both 1) your password and 2) your email address to modify settings, that's called 2 Factor Authentication.


Ummmm, that's not 2FA.
that two items in the same 'factor' category.

1 - Something you know - account, password, pin, email
2 - Something you have - RSA token, PIV/CAC card
3 - Something you are/do - fingerprints, retna, typing cadence, etc



ETA: typo
This post was edited on 8/26/22 at 7:05 am
Posted by CAD703X
Liberty Island
Member since Jul 2008
86709 posts
Posted on 8/25/22 at 9:29 pm to
quote:

you wanted Plex to verify both 1) your password and 2) your email address to modify settings, that's called 2 Factor Authentication.


No it's not.

Jesus. You might want to read up on this a bit before replying.
Posted by j1897
Member since Nov 2011
3901 posts
Posted on 8/26/22 at 6:57 am to
quote:

So I didn't have to rebuild my media collection because someone trashed my Plex account using a browser from India?


You had to do this twice? Once again, i'm talking in the present tense. You seem to have difficulty grasping this.
Posted by CAD703X
Liberty Island
Member since Jul 2008
86709 posts
Posted on 8/26/22 at 8:10 am to
quote:

You had to do this twice? Once again, i'm talking in the present tense. You seem to have difficulty grasping this.


let me explain it like i'm talking to a 5yo because i am.

plex account compromised #1: resulted in having to rebuild everything from scratch after someone in India used my account info to login to the plex site on the web and began trashing my setup; deleting media & changing users, fricking with all the settings....

plex account compromised #2: EXACT SAME SCENARIO - logins were stolen on a massive scale.

CAD posts "great, another data breach that could result in losing everything again" and j1897 replies nuh-uh...you server can't be trashed if someone just has your email & password and it never happened the first time.

since you're trying to lie about my response, i'll put it in again because it was only 15 words.

Maybe you should read them SLOOOOWER and OUT LOUD and then you'll comprehend them.

quote:

get it together, plex. second time my server has been compromised in the last year.




that about sum it up, einstein?

psst: 'plex server' is referring to the software agent running plex accessible through a browser, not someone logging onto my local PCs.

This post was edited on 8/26/22 at 8:19 am
Posted by j1897
Member since Nov 2011
3901 posts
Posted on 8/26/22 at 8:35 am to
quote:

plex account compromised #2: EXACT SAME SCENARIO - logins were stolen on a massive scale.


They were hashed with salt you fricking retard. This is not true.
Posted by Vrai
Baton Rouge
Member since Nov 2003
3955 posts
Posted on 8/26/22 at 10:20 am to
#nerdrage
Posted by sahikojones
St. George, LA
Member since Oct 2018
634 posts
Posted on 8/26/22 at 11:58 am to
quote:

hashed with salt



Hashed with both salt and pepper
first pageprev pagePage 2 of 2Next pagelast page
refresh

Back to top
logoFollow TigerDroppings for LSU Football News
Follow us on X, Facebook and Instagram to get the latest updates on LSU Football and Recruiting.

FacebookXInstagram