Plex is one of our favorite media servers, and it’s certainly one of the most popular media streaming apps out there. This popularity is likely exactly what made it the target of a hacker who compromised the service’s user forums on Wednesday.
Plex confirmed the intrusion in a blog post yesterday. “The attacker was able to gain access to some personal information, such as IP addresses, forum private messages, email addresses, and encrypted (hashed and salted) passwords for our forum users,” the post reads.
As a security measure, Plex has reset the passwords of all forum accounts. Since Plex uses single sign-on (SSO), this means that any Plex.tv accounts linked with forum accounts have be reset as well.
Fortunately, no financial data was compromised. “We have no reason to believe that any other parts of our system were compromised, and we never store credit card or other payment data on our systems,” the post reads.
Just because no financial data was revealed in the hack, that doesn’t mean that the hacker isn’t looking for money. The hacker, who goes by the name of “savaka” posted a message to the hacked forum claiming that users’ details would be released unless a ransom of 9.5 Bitcoin (roughly $2,400) was paid by today.
“This ransom is still active and on the 3rd: if no BTC payment is made, the ransom wll go up by 5 BTC,” the message read. “Eventually if no BTC payment is made, the data will be released via multiple torrent networks and there will be no more Plex.tv.”
Plex has no intention of paying the ransom, so while the password reset should be enough to keep your Plex account safe, you will want to make sure that if you use the same login info for any other sites, you change your password on those sites as well.
The password reset is causing some problems for users of third-party apps. If you’re running into trouble after the password reset, Plex has the answers to some common questions in the blog post announcing the breach.
Apple just launched a new entry-level configuration of the 14-inch MacBook Pro.
Even though the design and core hardware are identical, it gets the new M6 processor, which is also debuting in today's iMac refresh.
Apple just announced a refreshed version of its colorful desktop computer.
The latest-gen iMac comes with the new M6 processor, which packs up to a 12-core CPU and up to a 12-core GPU, plus an upgraded Neural Accelerator.
Opera wants to move routine AI work out of distant data centers and onto the computer already sitting on your desk. Its new WebAI preview lets websites and browser extensions use local models inside Opera One without requiring another AI subscription or sending the information they handle to a cloud service.
WebAI also opens local AI to third-party developers instead of reserving it for Opera’s own features. Your laptop supplies the computing power, provided it has enough to spare.