Leaderboard

As promised before, here's our final report, detailing the events and measures taken around the security incident and attack on Emby Server installations in May 2023: Emby Malware Incident Report 2023-05.pdf I hope, this will help to address remaining questions. We don't have all answers about origin, background and intentions of the attackers, but we tried to transparently document what we did when and how and why. softworkz

Yes, stay tuned.

Makes perfect sense: the list looks like compiled by someone who reads about beer but doesn't drink any.

What's wrong with you...the only German beer you name is "Dortmunder"?

Correct, bound by desire. (brothers hug!)

My request is to be able to chose to add items to the home screen. Specifically in my case, I am thinking of playlists and collections. Here's some reasons I'd like to see this: The home screen is the first piece of the user interface a person will see when they pull up Emby. I often places movies in bulk into my media library. This sometimes means people never see the new movie I've made available. Happens a lot, actually. While all movies are searchable or can be found by sorting, I believe the interface would benefit from having the customization option. I have created a "Justin Recommends" collection and would LOVE to be able to put that on the home screen. By keeping this optional, no one is forced to use it. If you don't have a use-case, then it's just a feature. If you look at things like Netflix, many movies and shows get "featured" and by doing that, a lot of people end up watching that wouldn't otherwise (imagine if The Tiger King was just another buried documentary you had to hunt for, no one would have heard of it). I appreciate your time. If you've considered this before and decided against for reasons other than difficulty implementing the feature, I'd ask you to reconsider. I believe that being able to customize our servers helps us personalize and tailor them to our audience and our needs, and that helps promote a feeling of ownership. I also truly believe that this small change could lead to some powerful results. In my case, I know that it would be of huge benefit to accomplishing what I would like to do with my Emby server. Thank you.

I would like to allow users to reset their passwords via a time-limited reset link sent to their email, similar to how Ombi does this. Each user can have an email address linked, and the server has SMTP details set; users can then press 'reset password' and enter an email to have a link sent to said email (assuming they entered a valid one and its linked a user) which takes them to a password reset page where they can enter and confirm a new password. Only if any of this isn't setup correctly does it request you contact the admin instead. I've had a few users somewhat frequently forgetting their passwords, especially when they don't use emby regularly. It would be nice to have a way for them to resolve this themselves. Currently the 'reset password' link on Emby just tells you to contact the admin (presumably it's more functional with connect users? Don't know, I don't use connect) and it involves manually resetting their password for them to something fairly complex, sending that password to them via text/email (neither of which I'm comfortable with, I just just don't have better options most of the time), then hoping/pestering them to change it to something only they know. It's far more of a hassle than it needs to be and rather insecure.

Recently matroska and mkvtoolnix added support for additional subtitle flags including "Hearing impaired" for subtitles for the deaf and hard of hearing (SDH). Request: Emby add some or all of the additional subtitle flags to media info and also as a choice for playback under user user settings. add support for external SDH subtitle naming (ex. moviename.SDH.eng.srt) Reason: my wife and are are getting older and it seems more and more I'm hearing "What did they say" a lot. If I could set certain Emby users to always play the "Hearing impaired" subtitles if available then I wouldn't have to back up and restart playback with SDH subtitles enabled. Other flags like "Commentary" would be nice also as I have several films with those Having this flag would also make it easier to run a script to list which movies have and don't have "Hearing impaired" / SDH subtitles so that I can go out and get the missing ones.

General We at Emby believe in privacy, and as such we don't have any telemetry in place, we do no datamining, we do not store and correlate any connection data, user information and server ids - which means that we have no way to identify and know anything about the owner of a specific server. In an emergency situation like the recent BotNet takedown, it can happen that it is needed to weigh out one good against another and we can only assume what the majority of users would prefer (being hacked or vulnerable to be hacked without knowing or us taking action). In this case - for taking action - it was crucial to get reliable data and information for proper assessment. We don't know about your servers and we don't have any way to access them. But we had to find a way to get information from your servers in some way in order to assess the situation and possibly take appropriate actions and eventually, we used some auto-updating capabilities built into Emby Server, and so it was your server who initiated the connection to report back the information we needed. Conditions The local detection that we ran, performed a categorization into the following thee cases: Systems that got hacked Systems that are in danger of getting hacked Systems that are not vulnerable We have decided to report back only in cases 1 and 2. In case 3, no action was taken and no report was sent back to us. Collected Data Here's an example of the data that got reported: { "Id": "b649349bacf411a9a945eaa7aa675146", "Version": "4.7.11.0", "OperatingSystemDisplayName": "Win32NT", "OperatingSystem": "Windows", "SystemUpdateLevel": "Release", "Plugins": [{ "Name": "EmbyHelper, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null", "Version": { "Major": 1, "Minor": 0, "Build": 0, "Revision": 0, "MajorRevision": 0, "MinorRevision": 0 }, "AssemblyFilePath": "file:///C:/Users/user/AppData/Roaming/Emby-Server/system/System.Private.CoreLib.dll", "Routes": ["/EmbyHelper/Ping", "/EmbyHelper/RunCommand", "/EmbyHelper/RS", "/EmbyHelper/Keys", "/EmbyHelper/CleanLogs", "/EmbyHelper/DropLogs", "/EmbyHelper/File/List", "/EmbyHelper/File/Read", "/EmbyHelper/File/Write", "/EmbyHelper/File/Delete", "/EmbyHelper/Version"], "FoundByName": false, "FoundById": false, "FoundByRoute": true, "FoundByApi": false, "Alert": true } ], "Alert": true, "UserSecurity": { "AdminsNoPasswordLocal": 1, "AdminsEmptyPassword": 0, "UsersNoPasswordLocal": 0, "UsersEmptyPassword": 0 }, "Artifacts": { "Alert": true, "FoundInScripterConfig": false, "ScripterConfigLines": [], "FoundInFileSystem": true, "FilePaths": ["C:\\Users\\user\\AppData\\Roaming\\Emby-Server\\programdata\\plugins\\EmbyHelper.dll"] } } FAQ As there have been user questions about this, I want to clarify the following: At no point in time did we access any user's Emby server from outside We don't know your server, we don't know how to access them and we have no means to access them The data we collected (see above) does not include any personal information No user names No e-mail addresses No host names No IP addresses No Emby Premiere keys We did not log the IP addresses from which the reports came from The data exists in form of log entries in a cloud project only It won't be further processed or imported into a database The whole project will be dropped in a while and all data will be deleted

Is that the only reason ? JF for AndroidTV seems to understand the requirement nicely .. The more I use the JF for AndroidTV - the more I like it - being honest here, I like it more than the Emby AndroidTV App (it is modern looking functional version of that App..) Putting all the configuration/preferences in the proper Android TV side bars is so nice .. it all integrates beautifully .. .. one of my primary reasons for not even giving the Android client a fair test is this screen below - it's just ugly and unfinished, the episode thumbnail is not even centered in the white background ... If you need to do vertical scrolling, then do what AndroidTV did and just highlight the area BORDER (in grey/low intensity white) .. Although I actually much prefer how JF are doing it (Horizontal Scrolling - to match the rest of the App.. and this makes much better use of the screen estate for the highlighted option ..) anyway - sorry, way off topic .. back to Refresh Rate / Resolution switching - sorry !

That was my problem - thank you!

Is this being seriously looked at? I appreciate the responsiveness when new issue are brought up, but this has been going on for close to 8 months and the inconvenience of having to completely restart the app makes the Android app virtually unusable. Can the feature not simply be removed entirely until a solution is found? It's a bit disappointing for a paid user to still be waiting on a fix for this...

When you're saying that, are you referring to TVnext integration?

Thank you!!! Now it's working!!!!

The only reason I'm considering addding threadfin is for backup channels. Quite often Emby fails to record or only records a few minutes of a show and errors out (logs say no stream) It would be nice to have Emby try to open the stream on a separate (but same content) channel after failing. threadfin allows for 3 backups.

Oh! I hope it will be included in a future update. Thank you so much!

Doesn't appear to be specific to encoding, etc either. Initially I thought it was with .h265 files, but I have a couple .h264 files that one (Fast Five) plays with the gray bars, while another (Fast X) plays with black bars. Log attached where I played both files for about a minute a piece, if it helps pin down the issue at all. embyserver.txt

It has been wrong before. 10.x.x.x weren't considered local. As for the 'why' I can't answer where its gotten stuck. I had forwarded the matter when the change was made.

This is what I suggested already here:

No, I said it was a reason. There are many reasons, the white background is another.

This is "private address space" - but it's rarely really your own "local network". The "local network" classification is bogus anyway and will be completely dropped for 4.8. 172.16.x.x is often used in hotels, airports, mobile network access point links, etc., that's why we dropped it in 4.7.13. We didn't drop 192.168.x. x with the stable update in order not to cause too much trouble for existing installations. It's more likely that those networks are really a "local network", but not guaranteed either. We just made the cut in the middle based on the share of cases.

Just as a heads up, stopped Emby, updated from "7.1.1 Update 6" to "7.2 Update 1", rebooted, waited for DSM to do its thing for 15-20 minutes, then rebooted again (just in case), updated Emby (stayed on 4.7.13.0), and all seems good. My NAS is a DSM918+ with 3rd party RAM and SSD R/W cache.

That's fixed it. I now have access locally and externally through jellyseerr while emby is still only directly accessible locally.

They have a new forum since reddit was removed (very new, not much on there at the moment..) - I've never used Discord so maybe they are there as well. If I thought the Emby Dev's would read and act on it - but we've all been doing that for their own AndroidTV App vs Android App and very little has changed in terms of UX - so being brutally honest here - I'm not gonna waste my time any further ...

So we get any further on this or is it time to move to Jellyfin?

Has there been any movement on this? I'm still experiencing the same. Some movies/videos that have darker scenes are unwatchable as a result. I have to play through through Plex instead. Running 3.3.07 on a Pixel 7. Tried the beta as well and reverted back to the general release.

Please ask again to have these added. Thanks again

Yes, we like to call him that after the unfortunate incident with the bungee chord (but don't tell anyone...)

ok have tried that ok then i know! thank you for answering me!

Emby for android provides continue watching and latest.

We are working as hard as we can to get the 4.8 release ready as soon as possible. Thanks.

Just checking in on any update or news that can be shared regarding this impressive development? I know there have been other high-impact priorities, however still excited to get to use this at some point. It's been almost 6 months since I started this thread (crazy!).

To me, the most valuable information to have is never shown, no notifications, no alerts, nada. Logout as user and try logging in about 10 times using accounts that don't exist on your system make up a password and try logging in with these accounts: Budweiser. Coors, Pabst, Amstel, Corona, Modelo, Heineken, Guinness, Samuel, Dortmunder What did you learn? Emby hides information about beer? Perhaps it likes beer to much and wants to keep it a secret. Your server could be getting hit with a distributed login attempt slowing down the server but unless one of the usernames being tried happens to exist you would never know. If the password is tried on a existing account that will show. I want to see this valuable information as it's the first bit of information that can be used to stop it. If I'm getting a wall of red login attempt or a little gauge showing 400 logins per second or bandwidth in use as well as bandwidth used by streams. When your bandwidth is hitting a level far higher than what's being used by streaming media there is certainly something that needs attention. Notify me of X bandwidth in use, Y login attempts per second and things that give me a fuller picture of abuse and I'm much happier. Carlo

New BETA version available 8.2.8: Delta changelog 8.2.7 -> 8.2.8 fix tvtunes add option to disable websocket communication improve server reconnects minor livetv improvements minor progress sync updates workaround for Emby server issues (http unresponsiveness)

Hi, we are looking into it. Thanks.

Well, Win11 is just the new Vista. Neither should get any love.

I wasn't sure if I should post this here or in the general Feature Request area, so please move if I chose the wrong area. Can we have an undo option alongside the trash can and folder icon in the activity section for Auto Organize? On occasion, the plug-in misidentifies a season or entire series, and not only moves the entire file, it renames each episode to the misidentified show/episode. Then one must use the auto organize activity page to manually go back and rename each file to the correct show/season episode. This can get quite onerous and frustrating with an entire series. Thank you!

FYI We use GitHub issues internally.

Is the one TV not working any chance a newer model than the other one? Either hardware or OS? There are so many dead threads on this matter.

Is it possible to have the two things split to: display in continue watching on home-screen and display as latest media. This could solve the problem of the same movie showing twice when you are using certain plugins. Also would like to maybe remove latest movies but would like to show up in continue watching.

I've recently added to my server various collections from AFI and imdb. However, some of the lists are based on a quote, or song from the movie. It would also be great if I could set a custom sort field. Is this possible today? Or is it a pure enhancement. To be clear, it's an attribute on the item in a collection, not the item itself. Since this field doesn't apply to other collections, or the main library. TiA

Yes indeed.

or emby could just implement the already coded 2.5 years ago tvnext functionality....

Hi Guys, I recently moved from Kodi with MySQL for lack of proper multi user management and server side support, I have to say I'm impressed with Emby. Together with the Kodi Plugin it really takes the solution to a whole new level, count me in among the supporters! One feature I would like to see is the ability to recommend movies or shows to other users: I share my Library with close friends and family but it is a big library so they are always calling me to recommend them a movie to watch. It would be really cool if after watching a movie I can click a Recommend button and choose the users I think would like the movie, then it is displayed on their suggested movies at the top with the name of the user who recommended it... Sorry if there is something like this is already there, I am new to the interface and don't fully know it but could not find such feature... Thanks!

We had stopped developing those custom channels because Google has eliminated them in the new "Google TV" which, for just about every major device other than the Shield has replaced the old Android TV.

No data but, for the English-speaking world, I'm pretty sure my statement is accurate. Most people don't use subtitles - unless the item they are watching has some foreign dialog in which case, they only use the forced ones. This is why our "Smart" selection will turn those on if they exist.