7 ms·

I embarked on a similar journey last year after YouTube Music took down some albums I listened to religiously. I settled on Plex + Plexamp instead. I'm mostly

I embarked on a similar journey last year after YouTube Music took down some albums I listened to religiously. I settled on Plex + Plexamp instead. I'm mostly satisfied, but there are some rough edges like Chromecast and web playback.

akdor1154 1y ago
Plexamp is awesome and i miss it a bit as a Jellyfin user... But i don't trust the plex codebase. My suspicions were firmed up when Lastpass got hacked literally through Plex.
- dewey 1y ago
  What do you mean with “last pass got hacked through plex”?
  - tough 1y ago
    The LastPass breach was indeed linked to a vulnerability in Plex Media Server. Attackers exploited an unpatched version of Plex on a LastPass DevOps engineer’s personal computer, enabling them to install keylogger malware. This allowed them to capture the engineer’s master password after multi-factor authentication, granting access to sensitive corporate vaults. Notably, the Plex vulnerability had been patched in May 2020—approximately 75 versions prior to the breach. The compromise occurred because the engineer hadn’t updated their Plex software. While the flaw was in Plex, the breach underscores the critical importance of timely software updates and robust security practices. https://www.wired.com/story/lastpass-engineer-breach-security-roundup/ https://www.wired.com/story/lastpass-engineer-breach-securit...
    - dewey 1y ago
      Please don't post AI replies.
      - tough 1y ago
        it's a factual thing I learned after following the comment threads and asking the AI about it, it does link to the source article. Why is this bad? I will, im just wondering, would only the link to the source article been better/acceptable here? I dont' get the hate for AI replies if they're on topic and generated by a human tbh, but ill respect it since its not first time seeing this i guess
        SahAssar 1y ago
        Just link the article if you have nothing more to say. If you absolutely insist on posting AI-generated stuff be extremely clear that it is AI-generated instead of hiding that it has been ghostwritten by a LLM.
        tough 1y ago
        makes sense thanks for the feedback
        bigstrat2003 1y ago
        > Why is this bad? In short: other posters want to hear from you, not from an AI. AI written posts aren't actually valuable (we can all dump stuff into the AI just fine). If you don't have much to say, it's fine to just share a link to the source you found.

akdor1154 1y ago

Plexamp is awesome and i miss it a bit as a Jellyfin user... But i don't trust the plex codebase. My suspicions were firmed up when Lastpass got hacked literally through Plex.

dewey 1y ago
What do you mean with “last pass got hacked through plex”?
- tough 1y ago
  The LastPass breach was indeed linked to a vulnerability in Plex Media Server. Attackers exploited an unpatched version of Plex on a LastPass DevOps engineer’s personal computer, enabling them to install keylogger malware. This allowed them to capture the engineer’s master password after multi-factor authentication, granting access to sensitive corporate vaults. Notably, the Plex vulnerability had been patched in May 2020—approximately 75 versions prior to the breach. The compromise occurred because the engineer hadn’t updated their Plex software. While the flaw was in Plex, the breach underscores the critical importance of timely software updates and robust security practices. https://www.wired.com/story/lastpass-engineer-breach-security-roundup/ https://www.wired.com/story/lastpass-engineer-breach-securit...
  - dewey 1y ago
    Please don't post AI replies.
    - tough 1y ago
      it's a factual thing I learned after following the comment threads and asking the AI about it, it does link to the source article. Why is this bad? I will, im just wondering, would only the link to the source article been better/acceptable here? I dont' get the hate for AI replies if they're on topic and generated by a human tbh, but ill respect it since its not first time seeing this i guess
      - SahAssar 1y ago
        Just link the article if you have nothing more to say. If you absolutely insist on posting AI-generated stuff be extremely clear that it is AI-generated instead of hiding that it has been ghostwritten by a LLM.
        tough 1y ago
        makes sense thanks for the feedback
      - bigstrat2003 1y ago
        > Why is this bad? In short: other posters want to hear from you, not from an AI. AI written posts aren't actually valuable (we can all dump stuff into the AI just fine). If you don't have much to say, it's fine to just share a link to the source you found.