Plex hacked - How secure are jails at protecting FreeNAS?

[Mirfster]

Hey why did you change your PW? Not I can't get to your pron collection anymore. BTW, any IPs you see for VA are not really me it is either JoeSchmuck or JGreco :P

All kidding aside, I hope you get this sorted out. I don't use Plex but find it a little concerning nonetheless.

 

[DrKK]

I mean, if someone got into your system, and added themselves as invitees to stream the media, then as your server relogged into plex.tv, it would, presuming it could traverse the gateway (you ***DID*** block that default port on the WAN ingress, right?), allow them right back on to stream your shit (at a minimum)

I agree with the other men: You nuke this jail to the ground, delete it as a jail, delete the dataset that went with it, and you start over, this time with your head not in your anus. :)

 

[DrKK]

Not I can't get to your pron collection anymore

I wouldn't think Plex would be that great for pr0n?

 

[Robert Trevellyan]

I wouldn't think Plex would be that great for pr0n?

Nah, works great ... I think ... I mean, I've been told ... er ...

 

[depasseg]

Thanks guys. Made a new jail and tightened up the shared data to the jail (and made it read only).

 

[SweetAndLow]

My plex data is read-only. I don't think it ever needs write access unless you want to delete shows from plex.

 

[adrianwi]

I think if you are using the optimise functionality it saves the new files back to the source dataset, although you could probably change this to another location and make that read/write.