Selfhosted

59850 readers

477 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.
No spam.
Posts here are to be centered around self-hosting. Please ensure it is clear in your post how it relates to self-hosting.
Don't duplicate the full text of your blog or git here. Just post the link for folks to click.
Submission headline should match the article title.
No trolling.

Resources:

selfh.st Newsletter and index of selfhosted software and apps
awesome-selfhosted software
awesome-sysadmin resources
Self-Hosted Podcast from Jupiter Broadcasting

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago

MODERATORS

curbstickle@anarchist.nexus

curbstickle_lw@lemmy.world

244

Important Notice of Security Incident (forums.plex.tv)

submitted 9 months ago by KarnaSubarna@lemmy.ml to c/selfhosted@lemmy.world

123 comments fedilink hide all child comments

Additional read: https://www.bleepingcomputer.com/news/security/plex-tells-users-to-reset-passwords-after-new-data-breach/

you are viewing a single comment's thread
view the rest of the comments

[–] FreedomAdvocate 36 points 9 months ago (1 children)

Should have been put in the OP because people are going to jump the gun:

While we quickly contained the incident, information that was accessed included emails, usernames, securely hashed passwords and authentication data.

Any account passwords that may have been accessed were securely hashed, in accordance with best practices, meaning they cannot be read by a third party.

[–] AreaKode@lemmy.world 26 points 9 months ago (1 children)

Still, always good practice to change your password after this sort of leak. However unlikely it is that someone could access your account, it's never a bad idea.

[–] FreedomAdvocate 6 points 9 months ago (1 children)

If you use a unique password and have 2FA on there’s no real need, but yeah it can’t hurt.

[–] TieDyePie@lemmy.world 0 points 9 months ago (1 children)

I bet the 2FA secret was leaked too though...

[–] FreedomAdvocate 1 points 9 months ago

securely hashed passwords and authentication data.

Right there in the announcement.