Month: June 2024

Statt Bildung wollten die Raspberry-Pi-Macher schon lange lieber Wachstum. Der Börsengang ist ein weiterer Rückschlag für die DIY-Community. Ein IMHO von Johannes Hiltscher (Raspberry Pi, Börse)

Unternehmenskunden erhalten neue Zugangsprodukte bei M-net. Der neue Zugang kann mit einer direkten Standleitung zur Cloud gebucht werden. (Glasfaser, Telekommunikation)

Das US-Startup Light zeigt eine dritte Generation des Light Phone. Es ist quasi ein Anti-Smartphone, weil es auf viele Besonderheiten moderner Geräte bewusst verzichtet. (Handy, Smartphone)

Statt mit einer Karte authentifizieren Kunden sich mit biometrischen Kennzeichen. Verschiedene Merkmale sind geplant. (Biometrie, Security)

Das oberste Gericht in Wien hat einen Teilnehmer an einem unberechtigten Shitstorm zur Zahlung des gesamten Schadensersatzes verurteilt. (Shitstorm, Security)

Plex is a multifunctional media software and service that allows users to easily access all of their entertainment in one place.

Whether movies, music, TV shows, or photos, Plex can organize and index, making the content ready to stream on a wide variety of supported devices.

Plex can be used for curating home videos or enriching purchased media with metadata, for example, which can be stored on the media server. In addition, the company offers Plex Pass, a premium subscription that provides access to hundreds of live TV channels and more than 50,000 on-demand titles.

Plex Pirates

Lately, Plex has been working closely with some of the major content publishers to give provide access to licensed entertainment. At the same time, however, it is also battling a group of ‘pirates’ who abuse their system by publicly sharing libraries with infringing content.

Last summer, Plex surprised users by actively blocking media servers hosted at large German company Hetzner. These were, purportedly, often used to share pirated material and an outright ban aimed to end this unauthorized activity.

Plex also targeted a GitHub repository that allowed people to reshare Plex libraries that were not originally theirs. This workaround was used to share content with broader audiences than originally intended, without the owners’ permission.

New Problem: Media Server Hack

The ‘reshare’ repository was removed by GitHub, and it was removed from Docker soon after. While there are still copies of the code floating around today, Plex already has a new problem on its hands.

A few days ago, anti-piracy outfit MarkScan sent a DMCA notice to GitHub on behalf of Plex. According to the takedown request, there are several repositories that contain code used to ‘hack’ Plex’s media server.

“We have found that users on your platform are providing codes to hack Plex servers. Therefore, we request that you remove the below URLs from your website,” the takedown notices reads.

Free Pass and Godmode

The notice isn’t particularly specific, but archived copies of the repositories, which have since been removed, explain more clearly what the code could do. For example, plexmediaserver_crack enabled “Godmode”, allowing people to use all features without a subscription.

“Enables Godmode, unlocking all features on (hardware transcoding, intro/credit detection, HEVC transcoding, etc..) on Plex Media Server. Including Plex Pass features without a required subscription, and including early-access/development/Plex Ninja features.”

A companion repository titled ‘plexpass_hook‘ fools Plex into believing that a user has a paid Plex Pass subscription, making it possible to skip intros as well.

While the code itself doesn’t appear to be copyright infringing, it might circumvent Plex’s technological protection measures, which violates the DMCA. In any case, GitHub didn’t hesitate, and the repositories were swiftly removed.

From: TF, for the latest news on copyright battles, piracy and more.

Der Entdecker der Schwachstelle behauptet, sie lasse sich sehr einfach ausnutzen. Selbst ein aktiver Lockdown-Modus könne die unerwünschten Anrufe nicht blockieren. (Sicherheitslücke, Apple)

Romslab hat rechtswidrig Nintendo-Switch-Spiele angeboten. Der Antragssteller ist nicht bekannt - es gibt aber Hinweise, wer es sein könnte. (Internetsperren, Urheberrecht)

Die Samsung T7 zählt zu den bestbewerteten tragbaren SSDs bei Amazon. Jetzt ist die kompakte Festplatte mit 2 TByte 25 Prozent günstiger. (Solid State Drive, Speichermedien)

Dieser Live-Workshop vermittelt alle erforderlichen Grundkenntnisse des Informationssicherheitsmanagements nach ISO/IEC 27001 und bereitet auf die Zertifizierung vor - Prüfung inklusive. Auch in Englisch verfügbar. (Golem Karrierewelt, Unternehmenssoftware)