3 comments

  • foobarian1 hour ago
    &gt; internet-facing Plex servers<p>This is terrifying. Who runs things like this open to the outside?
    • dewey1 hour ago
      Many people, as your TV and sometimes friends have to connect to it and you don&#x27;t want to explain Tailscale to them.
    • benoau51 minutes ago
      You largely have to for Plex themselves to middleman access to your media collection.
    • blntechie35 minutes ago
      I do run it open to the outside through cloudflare tunnels. I don&#x27;t want to connect my TVs to tailscale every time to play a movie.
    • bigstrat200353 minutes ago
      I do. I like to stream music from my server onto my phone when I&#x27;m out and about. And it&#x27;s authenticated, so there&#x27;s nothing terrifying about exposing it (security vulnerabilities aside, but that can happen to any software you expose).
    • symlinkk37 minutes ago
      Plex themselves literally recommend it and show a warning icon if it’s not accessible outside your local network. I always thought it was insane. To make matters worse their Synology package doesn’t auto update itself. I would guess there are a ton of vulnerable boxes sitting out there.
      • iAMkenough16 minutes ago
        If you’re exposing anything on Synology to the Internet, you’re already playing with fire. Their packages (like Container Manager) are usually very far behind on security patches.<p>I think the current version of Docker engine Synology uses was end-of-life 2.5 years ago.
        • chrisweekly1 minute ago
          Synology NAS - an ugly doorstop with data loss resulting from its half-baked post-purchase attempts to enforce hardware vendor lock-in. (Was working fine w&#x2F; a Western Digital drive, the next day, boom.)
  • 2OEH8eoCRo01 hour ago
    Reddit discussion here: <a href="https:&#x2F;&#x2F;www.reddit.com&#x2F;r&#x2F;PleX&#x2F;comments&#x2F;1x95krg&#x2F;inthewild_exploitation_of_old_plex_servers&#x2F;" rel="nofollow">https:&#x2F;&#x2F;www.reddit.com&#x2F;r&#x2F;PleX&#x2F;comments&#x2F;1x95krg&#x2F;inthewild_exp...</a><p>Affects an older version of Plex and was patched in August.
  • Hetaireia1 hour ago
    [flagged]