Striming videa u lokalnoj mreži (plex, transcoding, problemi...)

[Stock]

Plex now helps sell movie theater tickets

Discovery data from Plex users will help studios, advertisers.

arstechnica.com

Discovery data from Plex users will help studios, advertisers.

Ljudi oduševljeni 🙂

Every new Plex announcement pushes me one step closer to ditching it entirely despite having a lifetime pass.

 

[darkobg]

Od pre 5 dana veliko iskorišćavanje ranjivosti Plexa (Plex2Shell). Kompromitovan mi je server, ostala zakucana verzije... Simptomi zbog kojih sam posumnjao da nešto nije ok, gušenje mreže... Veliki DDOS napad se sa ranjenog hosta sprovodi... zagušen mi bio upload od 1gbps 🙂

Identično je bilo i kod mene:
FYI:

• in from 94.154.43.88 on 32400, then called back to it on 8952
• /tmp/.pxb (its own curl/wget), /tmp/.px_7c1e
• bot at /tmp/.spid (self-deletes, shows as "cron"), copy at /var/tmp/kworker + kworker.sh
• C2 176.65.149.82:48101, backup hand.genddos.st
• plain text orders like !ATK 179 udpplain 80 <ip> 53 len=1400
• sha256 a654ffc9ea1d3af1cb07feeefe8ee078a0faaaf60b31aa20cfbe082d6c22696c

više informacija:

https://www.reddit.com/r/selfhosted/comments/1x9trfc/plex_being_actively_exploited_plex2shell_on_32400/

https://github.com/code-zm/plex2shell

https://zmain.info/blog/plex2shell