Plex themselves literally recommend it and show a warning icon if it’s not accessible outside your local network. I always thought it was insane. To make matters worse their Synology package doesn’t auto update itself. I would guess there are a ton of vulnerable boxes sitting out there.
If you’re exposing anything on Synology to the Internet, you’re already playing with fire. Their packages (like Container Manager) are usually very far behind on security patches.
I think the current version of Docker engine Synology uses was end-of-life 2.5 years ago.
I do. I like to stream music from my server onto my phone when I'm out and about. And it's authenticated, so there's nothing terrifying about exposing it (security vulnerabilities aside, but that can happen to any software you expose).
> internet-facing Plex servers
This is terrifying. Who runs things like this open to the outside?
Many people, as your TV and sometimes friends have to connect to it and you don't want to explain Tailscale to them.
You largely have to for Plex themselves to middleman access to your media collection.
I do run it open to the outside through cloudflare tunnels. I don't want to connect my TVs to tailscale every time to play a movie.
Plex themselves literally recommend it and show a warning icon if it’s not accessible outside your local network. I always thought it was insane. To make matters worse their Synology package doesn’t auto update itself. I would guess there are a ton of vulnerable boxes sitting out there.
If you’re exposing anything on Synology to the Internet, you’re already playing with fire. Their packages (like Container Manager) are usually very far behind on security patches.
I think the current version of Docker engine Synology uses was end-of-life 2.5 years ago.
I do. I like to stream music from my server onto my phone when I'm out and about. And it's authenticated, so there's nothing terrifying about exposing it (security vulnerabilities aside, but that can happen to any software you expose).
Reddit discussion here: https://www.reddit.com/r/PleX/comments/1x95krg/inthewild_exp...
Affects an older version of Plex and was patched in August.