Just saw a couple posts on the forum, one notes that the player team got laid off. And another that it was more than 20 people.

https://forums.plex.tv/t/2026-20-0-beta-ios-and-tvos-4k-dovi-hdr10-won-t-play-infinite-spinning-circle/943966/92

https://forums.plex.tv/t/are-the-desktop-apps-dead/935518/118

Just thought I’d voice my concerns about Plex as someone who has seen this before from other companies that once offered lifetime passes…

With the most recent updates being as bad as they are, as well as layoffs happening within their company, Plex looks eerily similar to other companies that drove themselves under and eventually restructured under a different name in order to break user lifetime pass agreements in favor of an all subscription based platform and changing to a different business model.

Just saying… I think this is a controlled burn (As in they’re purposely tanking their existing platform) and everyone who paid for lifetime passes should be watching this closely.

I can’t imagine anyone investing in the lifetime passes right now, but I would advise anyone here from Google, or who is somehow just now finding out about Plex to not sink any money into it, subscription or lifetime pass.

The :public tag installs the newest Plex every time the container starts. So Plex is always current, but the image itself apparently never gets rebuilt. Mine was Ubuntu 20.04 from 2021. Watchtower never noticed because the tag never changes.

Trivy found a pile of fixable high/critical CVEs in it, including two on CISA's known-exploited list: unrar (CVE-2022-30333) and HTTP/2 Rapid Reset (CVE-2023-44487).

Plex bundles most of its own libraries, so I'm not saying these are exploitable through Plex. But after Plex2Shell, a 2021 userland on an internet-facing box ain't where you want to be.
 

Fix: switch to the :latest tag and give up the self-updating-on-start feature.
 

EDIT: this situation also appears to apply to :plexpass and :beta tags.
 

EDIT2: it turns out the LinuxServer image offers the ability to install the current Plex at startup AND its base OS is updated frequently. I've switched to that image, no migration necessary. lscr.io/linuxserver/plex:latest

How does Jelly/Emby/Infuse compare to Plex if I am NOT using the remote network connection? Everything I read here says Plex has a huge advantage to the others because of the ease of remote connectivity .... but if I don't use that???

I have been riding with Plex since it was in beta. The entire community back then contributed to the project with feedback and ideas that were heard, implemented, and appreciated by the small staff.

You can feel that energy when reading the newsletter.

I've been looking about and come across many "this-might-work-trust-me-bro" scripts to run on your Plex server to check for attack,.

But I've yet to see anything that just states "if this file is here and this process is running, you're gubbed".

Is there a simple check? My paranoia has me very close to just nuking my server and starting again, just in case.

Tldr im an idiot, package manager was broken and I didnt realize, got pwned, plex running on windows, immediately shut it down and isolated, found exploit in logs. Created an isolated network segment, shut down all services on the box that would have expected network traffic, enabled internet access on box for 2 minutes, box reached out to over a dozen c2 servers in a dozen countries instantly.

Rebuilding from metal now, oh happy days.

But yes if you think youre safe cus windows dont be dumb, investigate

Hi everyone,

I have a Synology NAS with a 6 TB NTFS USB drive used by Plex and qBittorrent.

My drive showed 4.4 TB used, but I couldn't find the files taking up the space, even with hidden and protected files enabled in Windows.

After investigating via SSH, I found 649 deleted movie files taking up 1.7 TB in:

/volumeUSB1/usbshare/@eaDir/@unlink

These were full-size MKV files of movies I had deleted through Plex. Plex is configured to empty its trash after every library scan, so I don't understand why these files remained.

I manually deleted the files from @unlink, and the disk space was immediately corrected.

Does anyone know why this happens? Is Plex responsible, or is this a Synology/NTFS issue? Is there a way to prevent it from happening again?

p.s. the "synology recycle bin" is not active for this drive in DSM

Plexamp v4.50.20-beta.33

Desktop is out on the beta channel, and mobile is on its way to TestFlight and Play testing. The main ones: artist pages on a computer or tablet got a lot of attention, and Android Auto’s queue stops jumping back to the top.

Added

• Desktop: drag the sidebar’s edge to make it wider or narrower; it remembers the width.
• Desktop/Tablet: choose what an artist page’s header shows from its ⋯ menu: background art, the artist’s picture, or both.
• Similar artists, Sonic Recommendations and music service hubs follow the page’s Grid, List or Carousel setting.
• Sonic matches show their percentage and whose library they’re from in Grid and List too.
• The signal path light sits after the codec and is a glowing dot; tap either to open the signal path.

Fixed

• Desktop/Tablet: artists without background art get a header that fits their picture.
• Desktop/Tablet: the artist header leaves the first row of albums in view in a short window.
• Similar artists in a carousel keep loading as you scroll.
• Albums on an artist page no longer draw twice as it opens.
• Windows/Linux: album, artist and playlist titles no longer have their descenders clipped.
• Android Auto: the play queue no longer jumps back to the top while music plays.
• Android: music no longer stops in the background when a song changes sample rate.

Source: https://forums.plex.tv/t/221280/126

Sorry if this is a silly question...I'm just getting started with Plex and my friend suggested I save external subtitles as separate files, also he said I should find some tools supporting "forced subtitles".

Not exaggerating when I say this is the first time I've ever heard the term forced subtitles lol

Hello all, i have a netgear orbi 960 behind an att BGW router modem combo in passthrough mode.

To make the long story short, I can no longer use remote play just by upnp.

I have already verified that I'm not behind a double nat, that my nat type is open, that the port is open and visible using canyouseeme.org and that plex is using that port.

Despite all this, i am unable to access my plex through either app.plex.tv or my IP unless I manually port forward and forego upnp.

It should be known that plex was working wonderfully out of the box until I had to freshly re-install windows. After that windows install, plex no longer allows remote access through UPNP.

Any ideas? (I have tried every single tip there is on the help page for remote streaming).

To start this off I want to make clear that I am a complete dunce when it’s comes to networking and cybersecurity. It’s all just over my head.

I use my Plex server pretty bare bones, at least I imagine I do. It runs directly off my PC, I only house Movies and TV, if I want to watch something on the living room television I just run upstairs, flick on the computer, and head to the couch. This is all I’ve ever used it for. I constantly run a VPN as well.

My concern comes in when I begin to read through comments and posts on here and always talking potential threats to their network and data, and it kinda seems like everyone is using their Plex for much more than I am, but it could very well be I just don’t understand, because I, in fact, don’t understand what anyone is talking about. So, should I be worried running my Plex the way I do currently? Completely local? Or should I be taking other steps?

Along with this, I’ve been wanting to give server access to my family, which would just involve one other household. If I’m just using the Remote Streaming Pass, do I need to take extra steps beyond that? Is that secure on its own? I’ve been under the assumption that most people active here have their own methods of streaming remotely and that’s why so much precaution is taken and talked about, but then again, I simply don’t know and it’s hard to find an answer.

I’d really appreciate some clarity and direction with this.

Can we fix it? Properly calculate the video bounding box and resize matrix? Hide the player controls when in pip mode? Android, Pixel 8 Pro

I logged into Plex today and saw that I could purchase the Plex Pass; I thought it was a mistake, and there was also an update. But after the update, the message was still there. According to my billing history, I paid €169 for the Lifetime Pass on August 31, 2020, and have been using it continuously ever since. Now, though, it seems to be gone, since my billing history also says “Ended Oct. 20.”

What happend, what can i do?

Container is up to date but oh yea....lots of port scans

My Plex container was compromised in the recent Plex2Shell attack. I’ve managed to stop the malicious processes and set up a fresh, updated Plex container, but I cannot get the original infected container deleted.
I’m running Docker 24 on a Synology DS423+ with Btrfs. The old container has been stuck in removing for days, with PID 0. I’ve tried restarting Docker and even rebooting the entire NAS, but neither fixed it.
From the diagnostics, Docker seems to be getting stuck traversing a massive /run/plex-temp directory in the old container’s writable layer. It looks similar to this Docker issue: https://github.com/moby/moby/issues/42973
Has anyone dealt with this before? Is there a way to safely force the container and its writable layer to be deleted without affecting my other containers or media?
I’ve spent days on this and would really appreciate any suggestions beyond restarting Docker or the NAS, since I’ve already tried both.

Is there a way to export the artwork that is currently used for all items in Plex and have it plopped as a file next to each item on the HDD?

As I've gone along, I've customized it, but usually just by selecting from the available options in Plex, so when trying out Jellyfin, etc. none of that transfers.

If I could have something automatically save that as external art, I'd love it.

I keep getting notifications from the ATT app “We blocked an exploit attack on PlexMediaServer. Exploit attacks attempt to take advantage of device or software vulnerabilities to gain access to the device and the user's data.” Within the last 4 hours. I’m on the most recent server update.

ASS subtitles - the ones usually used for anime which converts signs and other writing into the same location/typecast/fonts/color…

Are still completely broken on the new Plex app on tvOS!!

Direct play is completely broken, the video stutters with ASS subtitles enabled no matter the file. You have to transcode to have a normal viewing experience with ASS subtitles enabled.

It worked perfectly before the new update.

Have they said they plan to fix it?

Not specific to settings but settings is a useful example. If I go to settings, and drill down into a specific settings menu like “Experience”, how do I go back to the top level settings menu? Left on the remote goes to the server name. Back button exits settings entirely and takes me to the menu with switch profile at top. I am a bit puzzled as to how to navigate this new UI.

apple tv 4k ethernet. i’m on unraid. docker. everything is updated. stuff that was working fine is now not working. why? just gives me an endless loading circle. 😢

Help. I’m 1500 miles from my server. I can stream my iOS PlexAmp no problem.
Thankfully I can at least access my music.
But when I try streaming movies from the iOS Plex app, I’m showing that my server is currently unavailable.
I’ve tried accessing it through WiFi and through cellular networks.
My server is running on a Win11 machine. Plex server is running the latest version. Prior to leaving for this trip I triple checked
that my server was accessible remotely. Ports are configured per Plex instructions.
I know I’m sol till I get back home. Any advice is welcome, comments on switching to Linux, though well intentioned is a no go.
Thanks in advance.