Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Opensubtitles.org breached – Email addresses, IP addresses, Passwords, Usernames

forum.opensubtitles.org

Post reply on HN
Print view View original

181–190 of 194 posts

Re: Opensubtitles.org breached – Email addresses, IP addresses, Passwords, Usernames

#181

Post by Markoff »

johnchristopher wrote: post #146
Markoff wrote: post #136

Earlier quoted context omitted.

huh? I use to download subtitles in VLC through built in VLsub via opensubtitles and nobody ask me for any login/pwd and I download A LOT of subs, sometimes even 5-10 to try with some releases now on the website I would hit the limit very fast, but through VLsub it's essentially unlimited

There was a time the built-in VLSub wasn't built-in and I remember at some point it was abandoned and then picked up again. Nowadays it's working again as intended, no more freezes or invalid login. Still has the bug where the next video in a queue picks up the good subtitles but it downloads the subtitle for the previous video. I googled vlsub opensubtitles not working and I still find relevant threads https://forum…

but you present your opinion as if it would be required now, while I use VLsub in VLC FOR YEARS without anyone asking me for long/pwd, so not sure what's your deal but you are clearly trying to mislead other based on maybe many years old experience, while reality for many years is that nobody asks you for login/pwd in VLsub

and yes, it is still sometimes freezing or has issues, but not sure what you expect from service you don't pay anything for, not even in forms of ads if you use it through VLsub

Re: Opensubtitles.org breached – Email addresses, IP addresses, Passwords, Usernames

#182

Post by Markoff »

m-p-3 wrote: post #164
spamtarget wrote: post #163

Earlier quoted context omitted.

It became way more frustrating when they started to add ads in the subtitles. It was a few years ago and since then i never even tried to use them

I downloaded the SRT, stripped the ads using SubtitleEdit and embedded them in the MKV file using MKVToolNix to keep it all together.

why bother with any dedicated app just to remove one or two lines of "ad" (99.9% is just them offering ad service, but seems like nobody is interested really), open in notepad, Shift+End, Delete, done

Re: Opensubtitles.org breached – Email addresses, IP addresses, Passwords, Usernames

#183

Post by Markoff »

mnw21cam wrote: post #149
Markoff wrote: post #139

Earlier quoted context omitted.

to his defense it's not like there is anything serious stored there with those accounts, it's just subtitles

It's not just subtitles - it's all the login information stored there as well. Email addresses to send spam to, passwords that have likely been reused on another site.

and how is you reusing password to download subtitles (it ain't even necessary really) problem of the hacked site?

yes spam could be annoying, but it's not like people use email only to register on one site

Re: Opensubtitles.org breached – Email addresses, IP addresses, Passwords, Usernames

#184

Post by patrakov »

colejohnson66 wrote: post #104
DrBoring wrote: post #86

Earlier quoted context omitted.

> to prevent super long passwords from eating up CPU time Is that why websites sometimes have low maximum password length requirements ? Ex: must be less than 20 characters.

The CPU usage difference between a hash on 20 bytes vs 100 (assuming ASCII) can't be that bad, can it?

We are not talking about 100 bytes of password here, but megabytes of garbage. See https://www.djangoproject.com/weblog/2013/sep/15/security/, also known as CVE-2013-1443.

"A password one megabyte in size, for example, will require roughly one minute of computation to check when using the PBKDF2 hasher."

Re: Opensubtitles.org breached – Email addresses, IP addresses, Passwords, Usernames

#185

Post by southerntofu »

I love the concept of OpenSubtitles, but they seem to have a hard time maintaining centralized infrastructure. I don't really understand why downloads are zipped in 2022 when GZIP over HTTP is plenty efficient: maybe it's for backend storage space, though?

Is there some way we could help OpenSubtitles decentralize and maintain a p2p or federated database of subtitles? This could probably prevent many modes of failure that have required to restrict access to the API over time.

Re: Opensubtitles.org breached – Email addresses, IP addresses, Passwords, Usernames

#186

Post by Handytinge »

emptysongglass wrote: post #132

And this is why users protect themselves with services like Firefox Relay, something Dustin Ingram, a Python Software Foundation Director, doesn't appear to understand [1] or care. My email was leaked in this breach, along with many others, an email I used to really value but one I've since relegated to the dumpster fire of "spam slot" because I learned my lesson too late. Dustin has now locked that GitHub to only pr…

What nonsense.

1. The repo in question is simply a list of domains. People can choose to block whatever domains they wish. This list holds no inherent harm or ill will and is not a "war against your privacy", it's simply a list of disposable email domains to do with what you wish.

2. This isn't in any way related to security breaches or disposable email domains and appears to be an entirely unrelated topic.

Re: Opensubtitles.org breached – Email addresses, IP addresses, Passwords, Usernames

#187

Post by Mindwipe »

nano9 wrote: post #101
throwaway834343 wrote: post #5

What is the motivation to run this non profit site? I can not believe the motivation can simply be to get subtitles to watch movies personally. I suspect this is not really non profit as there the site supports ads. My guess is the owner is making decent money via ads. To the readers of this comment, if you can make a rough calculation of the ad revenue with good assumptions to validate or invalidate my theory, that…

I don't understand such a website anyway. A website like OpenSubtitles seems like overkill for passing around text and timestamps. Why not use something like GitHub? Why couldn't the project simply be a big git repo? It would even be easier.

Because the text is ultimately copyrighted and it would get DCMAed immediately.

Re: Opensubtitles.org breached – Email addresses, IP addresses, Passwords, Usernames

#188

Post by emptysongglass »

Handytinge wrote: post #186
emptysongglass wrote: post #132

And this is why users protect themselves with services like Firefox Relay, something Dustin Ingram, a Python Software Foundation Director, doesn't appear to understand [1] or care. My email was leaked in this breach, along with many others, an email I used to really value but one I've since relegated to the dumpster fire of "spam slot" because I learned my lesson too late. Dustin has now locked that GitHub to only pr…

What nonsense. 1. The repo in question is simply a list of domains. People can choose to block whatever domains they wish. This list holds no inherent harm or ill will and is not a "war against your privacy", it's simply a list of disposable email domains to do with what you wish. 2. This isn't in any way related to security breaches or disposable email domains and appears to be an entirely unrelated topic.

It's not intended to be just a list of domains. It's intended to be called as a Python library (hence the aforementioned PSF member tending it) by actors who want to prevent user registrations on their platforms by users of disposable email domains.

This much is obvious by spending less than five seconds reading the README plastered on the front of repo. You're also welcome to peruse some of the PRs and issues in the repository if the README wasn't clear enough. In fact, go visit the last comment in the PR I linked: a contributor points to a Hacker News comment for reasoning why operators might want to make use of this blocklist.

I'm sorry, but yes it is related as the operators of repositories like this (and there are others) are deaf to the reasons why users make use of these disposable mail domains. That reason is because breaches like this happen daily and these breaches are a threat both to the public IDs we use for emails and to the private passwords we use, should they be poorly secured.

Re: Opensubtitles.org breached – Email addresses, IP addresses, Passwords, Usernames

#189

Post by m-p-3 »

Markoff wrote: post #182
m-p-3 wrote: post #164

Earlier quoted context omitted.

I downloaded the SRT, stripped the ads using SubtitleEdit and embedded them in the MKV file using MKVToolNix to keep it all together.

why bother with any dedicated app just to remove one or two lines of "ad" (99.9% is just them offering ad service, but seems like nobody is interested really), open in notepad, Shift+End, Delete, done

I like to make sure all the numbered lines are all sequential, and I already use it for creating subtitles so why not do it the proper way.

Re: Opensubtitles.org breached – Email addresses, IP addresses, Passwords, Usernames

#190

Post by johnchristopher »

Markoff wrote: post #181
johnchristopher wrote: post #146

Earlier quoted context omitted.

There was a time the built-in VLSub wasn't built-in and I remember at some point it was abandoned and then picked up again. Nowadays it's working again as intended, no more freezes or invalid login. Still has the bug where the next video in a queue picks up the good subtitles but it downloads the subtitle for the previous video. I googled vlsub opensubtitles not working and I still find relevant threads https://forum…

but you present your opinion as if it would be required now, while I use VLsub in VLC FOR YEARS without anyone asking me for long/pwd, so not sure what's your deal but you are clearly trying to mislead other based on maybe many years old experience, while reality for many years is that nobody asks you for login/pwd in VLsub and yes, it is still sometimes freezing or has issues, but not sure what you expect from servi…

Another random thread where someone has a problem with VLC and opensubtitles login password: https://www.reddit.com/r/VLC/comments/aqvzlm/unable_to_work_...

It's from my boy Andrew from the anti-vlsub-opensubtitles cell #3948 in Wichita. Thanks for outing us, we have to rebrand our whole operation now and update banners and usernames, etc. We were so close to convincing everyone to stop using vlsub and opensubtitles :(. /s

> so not sure what's your deal but you are clearly trying to mislead other based on maybe many years old experience, while reality for many years is that nobody asks you for login/pwd in VLsub

Post reply on HN