Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Disney+ Might Have a Notable Hacker Problem

fortune.com

Post reply on HN
Print view View original

21–30 of 33 posts

Re: Disney+ Might Have a Notable Hacker Problem

#21

Post by gamblor956 »

dhagz wrote: post #8

Extra fun tip I'm sort of nervous putting out there just because it's a potential attack vector: if you used the same email address as your existing MyDisneyExperience account, guess what? The password you set while registering for Disney+ is now the password for your MDE account - they were "merged" without notification (that I saw). So not only is your Disney+ account compromised, potentially the account you use to…

Based on the description of the hack, if your Disney+ account was "hacked" then your MDE account details were already on the black market.

TLDR: Disney+ wasn't actually hacked. But many people reused credentials from other sites that were already in account leaks.

Re: Disney+ Might Have a Notable Hacker Problem

#22

Post by lunias »

Starkus wrote: post #7

Does anyone else still torrent? I rarely watch a tv show or a movie, but when I do I just torrent it. I've been doing this since Limewire (which was a lot of really shitty porn at the time). Showed my boys Princess Mononoke the other day - will show them the Mandalorian tonight, a buddy told me its pretty good

Or usenet? Far superior to torrents IMO.

Re: Disney+ Might Have a Notable Hacker Problem

#23

Post by Starkus »

bronco21016 wrote: post #10
Starkus wrote: post #7

Does anyone else still torrent? I rarely watch a tv show or a movie, but when I do I just torrent it. I've been doing this since Limewire (which was a lot of really shitty porn at the time). Showed my boys Princess Mononoke the other day - will show them the Mandalorian tonight, a buddy told me its pretty good

I think many people, even if they pay for the services, still torrent. It’s so much more convenient to have everything in Plex where it plays across all devices rather than chase down which app/device combo has the content you’re looking for.

Sorry - forgot to mention I pay for subs like hbo, netflix, all that. If i ever see a movie in a theater, i torrent it later.

I've torrented all of game of thrones, yet, always pay my monthly for the service

Re: Disney+ Might Have a Notable Hacker Problem

#24

Post by MaupitiBlue »

MaupitiBlue wrote: post #3

With 10m moms and dads signing up, I'm going to guess this is largely due to password reuse from prior hacks. Christmas123.

Also more likely to be a leak from some account harvester / malware / ... rather than D+ getting hacked.

Shame on D+ for not screening passwords against known hacked u/p.

Re: Disney+ Might Have a Notable Hacker Problem

#25

Post by WorldMaker »

smacktoward wrote: post #12
MaupitiBlue wrote: post #3

With 10m moms and dads signing up, I'm going to guess this is largely due to password reuse from prior hacks. Christmas123.

It does seem like a particularly soft target in that regard. We really need a 2FA solution that's friendly enough for normal people to use. Like, yesterday.

We really need even just a 1FA solution that's friendly enough for normal people to use securely. Passwords clearly aren't secure for normal people, and we should stop pretending like they ever were.

Re: Disney+ Might Have a Notable Hacker Problem

#26

Post by WorldMaker »

dhagz wrote: post #8

Extra fun tip I'm sort of nervous putting out there just because it's a potential attack vector: if you used the same email address as your existing MyDisneyExperience account, guess what? The password you set while registering for Disney+ is now the password for your MDE account - they were "merged" without notification (that I saw). So not only is your Disney+ account compromised, potentially the account you use to…

> I have "merged" in quotes because I am not sure if changing your D+ email changes it for your MDE account as well, or vice-versa.

If the merger of Disney Movie Rewards and Disney accounts, or the merger of Marvel and Disney accounts are any indication to go by, it's likely forever to always be a mess. Disney's goal for "one account system" has just been one wild ride after another. Given how many of their websites still in 2019 redirect to or through *.go.com for reasons unknown, I have to imagine their web tech stack is a fascinating archeology dive under the hood.

Re: Disney+ Might Have a Notable Hacker Problem

#27

Post by httpsterio »

sli wrote: post #14
httpsterio wrote: post #13

Earlier quoted context omitted.

Does anyone still shoplift? /s Yes, people still steal. Torrenting is usually more convenient, but for media that actually cost a ton of money to produce, I still feel iffy about stealing it. I would never recommend it to anyone when buying and paying for media is still an option. Even if something like Ghibli movies might not conveniently be available for on-demand streaming, I still think everyone is under the mora…

Any particular reason that you're interchanging two words that are not interchangeable?

stealing, torrenting or piracy?

Re: Disney+ Might Have a Notable Hacker Problem

#28

Post by vinylkey »

pcroh wrote: post #18
bengotow wrote: post #17

Earlier quoted context omitted.

Hmm - is there a good summary of this argument I could read? I torrented many years ago and it always felt like stealing and still does. Seems more or less equivalent to shoplifting to me from a moral standpoint, would be curious to read into this! (I'm assuming this is not the "oh I actually pay and I just want to watch it on an unsupported device" argument)

If I shoplift a bag of Doritos, the shop has one fewer bag of Doritos. If I pirate a show, it doesn't disappear from Disney's hard drives.

What's a good word for "obtaining digital content without paying for the right to possess said digital content"?

Re: Disney+ Might Have a Notable Hacker Problem

#29

Post by kpU8efre7r »

22c wrote: post #15
httpsterio wrote: post #13

Earlier quoted context omitted.

Does anyone still shoplift? /s Yes, people still steal. Torrenting is usually more convenient, but for media that actually cost a ton of money to produce, I still feel iffy about stealing it. I would never recommend it to anyone when buying and paying for media is still an option. Even if something like Ghibli movies might not conveniently be available for on-demand streaming, I still think everyone is under the mora…

Piracy isn't stealing. Many people have been over this. You've been brainwashed if you think it's stealing. It's still against the law in many places, but to call it stealing is just spreading misinformation and propaganda.

You are getting to view copyrighted content without paying for it. That makes you a thief.

Re: Disney+ Might Have a Notable Hacker Problem

#30

Post by lonelappde »

pcroh wrote: post #18
bengotow wrote: post #17

Earlier quoted context omitted.

Hmm - is there a good summary of this argument I could read? I torrented many years ago and it always felt like stealing and still does. Seems more or less equivalent to shoplifting to me from a moral standpoint, would be curious to read into this! (I'm assuming this is not the "oh I actually pay and I just want to watch it on an unsupported device" argument)

If I shoplift a bag of Doritos, the shop has one fewer bag of Doritos. If I pirate a show, it doesn't disappear from Disney's hard drives.

The shop doesn't care about the Doritos. The owner isn't going to eat them. The shops only care about getting paid by who takes the Doritos.
Post reply on HN