I’ve been thinking about this more and more. According to the sidebar, this community is “A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.” Based on that I don’t think Plex qualifies.

Privacy: Plex clearly records the metadata of what you watch. When I used it, it would send me a report by email of what my “friends” were watching. Even with that turned off, their services still track telemetry.

Control: Plex has all of it. They can (and do) make unilateral changes to the service, how authentication works, where you can run it, etc.

So I ask, when you are hosting something that is entirely dependent on a commercial entity to function, is Plex really selfhosting in the spirit of this community?

  • BartyDeCanter@piefed.social
    link
    fedilink
    English
    arrow-up
    1
    arrow-down
    2
    ·
    1 hour ago

    Like all VPN-like things, some amount of data has to flow through their system. But almost everything is encrypted nowadays so it’s generally not too big of a worry.

    For Tailscale though, they see way less. They see your IP during device setup, and maybe during use if things are making it hard for them to enable a direct connection. Depending on your DNS setup, they may see some of your DNS requests.

    Its also really easy to setup your own headscale sever and then nothing goes to them at all. I recommend a small VPS for that, rather than running it on your home internet connection.

    • ShortN0te@lemmy.ml
      link
      fedilink
      English
      arrow-up
      2
      ·
      21 minutes ago

      Tailscale controls the routing, thus the traffic. They control which keys get trusted. They most of the time distribute and develop the software.

      It would be quite easy for them to start snooping on traffic, while on the internet anything basically is additional encrypted, that would not apply so broadly to the traffic that get sent via tailscale especially the self hosted crowd, a lot of that traffic would be http and unencrypted.