- My Forums
- Tiger Rant
- LSU Recruiting
- SEC Rant
- Saints Talk
- Pelicans Talk
- More Sports Board
- Fantasy Sports
- Golf Board
- Soccer Board
- O-T Lounge
- Tech Board
- Home/Garden Board
- Outdoor Board
- Health/Fitness Board
- Movie/TV Board
- Book Board
- Music Board
- Political Talk
- Money Talk
- Fark Board
- Gaming Board
- Travel Board
- Food/Drink Board
- Ticket Exchange
- TD Help Board
Customize My Forums- View All Forums
- Show Left Links
- Topic Sort Options
- Trending Topics
- Recent Topics
- Active Topics
Started By
Message
re: Plex data breach
Posted on 8/25/22 at 6:00 pm to j1897
Posted on 8/25/22 at 6:00 pm to j1897
quote:
You said your server was compromised, it wasn't.

You do realize you can do alot of damage to your Plex server using a browser right?
I had my friend shut the computer down to minimize the damage from deleting media through the browser.
Not sure how anyone on here made the leap to my computer being compromised because it wasn't.
My Plex server/metadata/files, however, were trashed.
ETA anyone who doesn't think this can happen put your money where your mouth is and give me the login to your Plex account and let's see what I can do in Chrome.

This post was edited on 8/25/22 at 6:06 pm
Posted on 8/25/22 at 6:26 pm to CAD703X
quote:
Not sure how anyone on here made the leap to my computer being compromised because it wasn't.
If you
1) Place files on a computer
2) Install software on that computer to access those files remotely
3) Grant permissions to an external account to use the functions of that software
4) Allow someone to compromise the external account
5) Witness that someone deleting files on your computer
then yes, your computer was compromised. But not because of Plex. Because of your poor security practices
This post was edited on 8/25/22 at 6:30 pm
Posted on 8/25/22 at 6:41 pm to efrad
quote:
you wanted Plex to verify both 1) your password and 2) your email address to modify settings, that's called 2 Factor Authentication.
Ummmm, that's not 2FA.
that two items in the same 'factor' category.
1 - Something you know - account, password, pin, email
2 - Something you have - RSA token, PIV/CAC card
3 - Something you are/do - fingerprints, retna, typing cadence, etc
ETA: typo
This post was edited on 8/26/22 at 7:05 am
Posted on 8/25/22 at 9:29 pm to efrad
quote:
you wanted Plex to verify both 1) your password and 2) your email address to modify settings, that's called 2 Factor Authentication.

No it's not.

Jesus. You might want to read up on this a bit before replying.
Posted on 8/26/22 at 6:57 am to CAD703X
quote:
So I didn't have to rebuild my media collection because someone trashed my Plex account using a browser from India?
You had to do this twice? Once again, i'm talking in the present tense. You seem to have difficulty grasping this.
Posted on 8/26/22 at 8:10 am to j1897
quote:
You had to do this twice? Once again, i'm talking in the present tense. You seem to have difficulty grasping this.
let me explain it like i'm talking to a 5yo because i am.
plex account compromised #1: resulted in having to rebuild everything from scratch after someone in India used my account info to login to the plex site on the web and began trashing my setup; deleting media & changing users, fricking with all the settings....
plex account compromised #2: EXACT SAME SCENARIO - logins were stolen on a massive scale.
CAD posts "great, another data breach that could result in losing everything again" and j1897 replies nuh-uh...you server can't be trashed if someone just has your email & password and it never happened the first time.
since you're trying to lie about my response, i'll put it in again because it was only 15 words.
Maybe you should read them SLOOOOWER and OUT LOUD and then you'll comprehend them.
quote:
get it together, plex. second time my server has been compromised in the last year.

that about sum it up, einstein?
psst: 'plex server' is referring to the software agent running plex accessible through a browser, not someone logging onto my local PCs.

This post was edited on 8/26/22 at 8:19 am
Posted on 8/26/22 at 8:35 am to CAD703X
quote:
plex account compromised #2: EXACT SAME SCENARIO - logins were stolen on a massive scale.
They were hashed with salt you fricking retard. This is not true.
Posted on 8/26/22 at 11:58 am to j1897
quote:
hashed with salt
Hashed with both salt and pepper
Popular
Back to top
