Hacker News new | ask | show | jobs
by panopticon 422 days ago
I embarked on a similar journey last year after YouTube Music took down some albums I listened to religiously.

I settled on Plex + Plexamp instead. I'm mostly satisfied, but there are some rough edges like Chromecast and web playback.
1 comments
akdor1154 422 days ago
Plexamp is awesome and i miss it a bit as a Jellyfin user... But i don't trust the plex codebase. My suspicions were firmed up when Lastpass got hacked literally through Plex.
link
dewey 422 days ago
What do you mean with “last pass got hacked through plex”?
link
tough 422 days ago
The LastPass breach was indeed linked to a vulnerability in Plex Media Server. Attackers exploited an unpatched version of Plex on a LastPass DevOps engineer’s personal computer, enabling them to install keylogger malware. This allowed them to capture the engineer’s master password after multi-factor authentication, granting access to sensitive corporate vaults.

Notably, the Plex vulnerability had been patched in May 2020—approximately 75 versions prior to the breach. The compromise occurred because the engineer hadn’t updated their Plex software. While the flaw was in Plex, the breach underscores the critical importance of timely software updates and robust security practices. https://www.wired.com/story/lastpass-engineer-breach-securit...

link
dewey 422 days ago
Please don't post AI replies.
link
tough 422 days ago
it's a factual thing I learned after following the comment threads and asking the AI about it, it does link to the source article.

Why is this bad?

I will, im just wondering, would only the link to the source article been better/acceptable here?

I dont' get the hate for AI replies if they're on topic and generated by a human tbh, but ill respect it since its not first time seeing this i guess

link
bigstrat2003 421 days ago
> Why is this bad?

In short: other posters want to hear from you, not from an AI. AI written posts aren't actually valuable (we can all dump stuff into the AI just fine). If you don't have much to say, it's fine to just share a link to the source you found.

link
SahAssar 422 days ago
Just link the article if you have nothing more to say. If you absolutely insist on posting AI-generated stuff be extremely clear that it is AI-generated instead of hiding that it has been ghostwritten by a LLM.
link