Interesting that you assume this is the list of taken things when that wasn’t what was disclosed to us. And Plex has been absolutely forthcoming with this in the past
While we quickly contained the incident, information that was accessed included emails, usernames, securely hashed passwords and authentication data.
They do give what has been taken, tho not the complete list so what exactly is anyone’s guess. By authentication data I assume the history of logins. What I listed is nearly literally what they said.
Literally everyday since those attack vectors are actively open right now and have been open for 5+ years (jellyfins whole lifetime) and proof of concepted for the developers that whole time.
That’s not exploitation nor any proof of any data being leaked. Plex was hacked three times, not theoretically like jellyfin, but 3 actual times their service was breached and hackers stole data…
You do you and keep using it if that makes you feel good, but saying jellyfin is less secure than Plex at this point is laughable.
It’s more akin to having your CD/DVD library visible through the window. All while asserting it’s better to write your info in a place that already has been broken into 3 times.
Sure jellyfin could do better, but the impact is overblown while literal PII has been stolen from Plex… Sure Sony could see you have Avengers on your instance. Could they prove you got it illegally just from that?