Just saw a couple posts on the forum, one notes that the player team got laid off. And another that it was more than 20 people.

https://forums.plex.tv/t/2026-20-0-beta-ios-and-tvos-4k-dovi-hdr10-won-t-play-infinite-spinning-circle/943966/92

https://forums.plex.tv/t/are-the-desktop-apps-dead/935518/118

I’m tired, boss.

This is the feature I use the most on Plex to watch anime with my friend, I’m pretty sure if they implement it back next it’s gonna be a paid option.. sucks.

Seriously. Not April Fools. No bamboozle. You can totally trust me.

Edit: Screenshot

Edit 2: Uggh, guys, slow down plz.

Edit 3: We did it Reddit!

u/Plex staff:

It's your second data breach in 3 years, exposing our personal data to the open internet. Most people will not follow best practices and will reuse passwords. Hackers will try to get what they obtained from you to gain access to other services. Hashing passwords is great, but it can be defeated.

Seriously. You owe your users, paying customers or not, an implementation of a local authentication, preferably with OIDC support, so that we no longer depend on your cloud services for it, and so we can use your product 100% offline. You can leave your cloud powered authentication baked in, but give us the choice. You can't argue not implementing it is for security reasons anymore. You clearly failed at it, twice.

Respectfully,

One of your many pissed off users.

Edit:

I've read most of the replies so far, and I'd like to address some of recurring themes.

- Switch to Jellyfin / Emby

While this is indeed a solution, I love Plex for the functionality it offers, specifically for its Plexamp companion app. When it comes to music consumption, there's simply nothing like it on the market, which makes leaving Plex an undesirable option, at least for me. Excluding the direction the company has taken in the past few years, the software is inherently good. My, admittedly naive, hope, is that Plex can take measures to make their software better from self-hosting perspective, while keeping the features that made it so popular in the first place.

- Data breaches happen, change your password, enable 2FA and move on

I firmly believe that normalizing data breaches is a dangerous attitude to have and I really hope that is is not where we are heading as a society that's increasingly depending on their digital identities. When someone trusts a company to give them their personal data, especially PII, they make a reasonable assumption that this company will make every effort possible to keep their data safe. When a data breach occurs, the company needs to be held accountable by their users and, if applicable, by local regulators. A simple post on a forum asking everyone to change their password and providing little to no technical information is not a sufficient response by a company that suffered a data breach.

- The data that was exfiltrated is securely hashed and cannot be read by third parties.

This, in my opinion, is a concerning assumption to make. Plex is a closed source software. No one outside of the Plex development staff has access to the source code. That means all we have to rely on is Plex's statement that their user's passwords are safe. In the spirit of keeping them accountable, we need to have a way to validate that the hashing algorithms they are using are indeed as strong as they claim it is. An assumption is made that they are using salt, pepper and bcrypt, but we have no way of validating that it is indeed the case. As others have mentioned, even if it is the case, it may not be crackable now, but will be in the future once the computing power is made available to people who have the data dump in their possession. This also assumes that their hashing algorithm are properly implemented. How is the pepper stored? Who has access to it? What controls does the company have to ensure this doesn't get leaked either by a staff, or another data breach? Those are questions we need to ask.

An anecdotal evidence that their hashing algorithm isn't as strong as they claim it is, is that on the same day the breach occured, I've received alerts from both Paypal and Microsoft that someone had attempted to gain access to my accounts. I was reusing the same password as I was using for Plex for a few services including those two. 2FA with Paypal and Microsoft saved me from having those accounts taken over. Reusing a single password across services was a mistake on my part. Even I, someone who works in IT and is intimately familiar with cybersecurity best practices, got complacent and lazy.

I've since taken measures to not only secure those two accounts, but spent the last two evenings changing my passwords all over the web, to unique, strong passwords, and enabling 2FA where it wasn't yet enabled. This is something I should've done ages ago. While these steps will limit the blast radius of a potential data breach, it's still on each company with do business with to ensure the data we give them, regardless of its nature, is securely stored, retained only for a period of time that's required for their business to run, and only accessible by people that need access to that information.

To be clear, I have zero evidence that those attempts on my accounts were a result of the Plex data breach. But I do find the timing of the breach and the login attempts suspicious.

Everybody's free to disagree with me and I welcome any constructive criticism. But just for the number of upvotes so far, I feel I'm not the only one feeling the way I feel towards what happened.

Thanks.

Is this how boomers feel when they hear millennials talking about the housing market?

I 3d printed a “case” to create a mobile media center. Basically by plugging this into any outlet, I can wirelessly stream my media via all our Plex devices. All in all it cost me $300 for all parts involved.

It houses 5 individual parts: 1. A travel router that provides a wireless signal to connect to. It doesn’t need internet; its purpose is to just broadcast Plex’s content to our devices. 2. The server. A Zimaboard that runs Plex Media Server 3. The hard drive. It stores over 200TB of digital content. 4. A cooling fan to keep the server from over heating. 5. The extension cord. This, once plugged in, provides power to the devices listed above.

It’s “smallish” footprint allows me to leave it in my backpack, simply pull out the end of the extension cord, plug it in, and “Bob’s your uncle”, we can all watch our plex content regardless of sitting close to each other (the wireless router creates the network for us to connect to). Been a long time Plex user and this makes it even more useful for us.

Feel like ads on Plex know too much about you? Here's how you can opt out of Plex selling your data to third parties.

Hello,

I’ve been working on a new alternative Plex client called Plezy, built with Flutter, and it’s finally ready to share!

Plezy is a modern, open-source Plex client that runs on Windows, macOS, Linux, iOS, and Android, and unlike the official app, you don’t need to pay a subscription for remote streaming.

Key Features

• Open-source - transparent and community-driven

• Cross-platform - desktop + mobile support

• MPV-based video player for great playback and codec compatibility

• No subscriptions required for remote access

• Lightweight, clean Flutter UI

Plezy is available to download for all platforms, and is also available on the App Store and Play Store.

👉 https://github.com/edde746/plezy

I built Plezy because I love Plex but wanted something open, simple, and not locked behind subscriptions or streaming restrictions. If that sounds good to you, give it a try. I’d love your feedback, bug reports, or even pull requests!