Live data from Hacker News

Disney+ fans without answers after thousands hacked

bbc.com

31–40 of 88 posts

Re: Disney+ fans without answers after thousands hacked

#32

They can still torrent the content, which is what I'm doing after I paid for the first month of Disney+ and then found out their DRM disallowed Linux because of "security levels".

You issued a charge back with your credit card company for that, right?

You'll probably never be allowed to sign up for D+ again. I'd only use charge backs as a final resort if I can't contact the company and/or I never want to do business with them in my life.

Re: Disney+ fans without answers after thousands hacked

#33

Earlier quoted context omitted.

At this point if they're rolling out a massive service without strong authentication controls and 2FA then it is their fault.

The attack surface is pretty small, though, isn't it? The most sensitive thing there is probably your viewing history and contact info. The additional overhead of supporting MFA (not from a technical standpoint, but from a user education one) would be tremendous, especially considering the customer base.

Particularly when most users will log in once on their Apple TV or whatever, and never think about it again— almost makes you wonder why they'd bother with passwords at all vs just doing an email-confirmation every time.

Re: Disney+ fans without answers after thousands hacked

#34

Earlier quoted context omitted.

At this point if they're rolling out a massive service without strong authentication controls and 2FA then it is their fault.

The attack surface is pretty small, though, isn't it? The most sensitive thing there is probably your viewing history and contact info. The additional overhead of supporting MFA (not from a technical standpoint, but from a user education one) would be tremendous, especially considering the customer base.

>The most sensitive thing there is probably your viewing history and contact info.

For the end user, that might be true. But for the provider, bandwidth isn't free. So if people are streaming content on shared credentials, they still have to pay for that outbound traffic. So each shared subscription starts to cost the providing service money.

Re: Disney+ fans without answers after thousands hacked

#35
post #5

It would really make me laugh if Disney was at fault but it sounds like people with compromised credentials reusing those same creds.

How do you know of your credentials are compromised?

Check out your Recently Viewed/Watched category. If things you haven't watched yourself start to appear there, then chances are...

Re: Disney+ fans without answers after thousands hacked

#36

They can still torrent the content, which is what I'm doing after I paid for the first month of Disney+ and then found out their DRM disallowed Linux because of "security levels".

You issued a charge back with your credit card company for that, right?

Credit chargebacks are a really great way to end up being banned from a lot of companies' businesses going forwards. It's a last resort, not a "I'm too lazy to ask for a refund" strategy.

It sounds like Disney+ was accepting refunds for preorders up until the launch day. Whether or not they can refund after presumably may depend on whether or not they can tell you've watched some of the content.

Re: Disney+ fans without answers after thousands hacked

#37
post #26

Earlier quoted context omitted.

No idea about Netflix, but for Amazon I bet there’s less account sharing than the other two - because it’s your actual Amazon account. My Netflix account is the only one that doesn’t have a very complex password manager password, because I share it with family. I won’t share my amazon account because I won’t give it that sort of password. I guess Disney+ is much closer to Netflix on that scale.

Netflix definitely has trouble with this because they too lack the whole "delete all sessions" capability, so it's next to impossible to recover an account that has been compromised. My partner went through this, and Netflix support told her to delete the account and make a new one (losing all our recommendations in the process). Why they can't be bothered to add a "log out all users" feature the way something like G…

Netflix does have that feature:

https://www.netflix.com/ManageDevices

Re: Disney+ fans without answers after thousands hacked

#38

They can still torrent the content, which is what I'm doing after I paid for the first month of Disney+ and then found out their DRM disallowed Linux because of "security levels".

Netflix also offers a subpar service on Linux for the same reason, the video resolution is limited to 720p, even with a Premium plan. The video quality can be tested on Netflix by searching for "test patterns" on the service.

The stream quality of HBO GO is consistently bad on Linux, with washed out colors.

I have no experience with Amazon Prime Video, but I've found several threads from 2019 with people complaining about the lack of 1080p streaming on Linux.

So even when Disney+ begins supporting Linux, you'll most likely get a subpar service for your money.

Re: Disney+ fans without answers after thousands hacked

#39
post #32

Earlier quoted context omitted.

You issued a charge back with your credit card company for that, right?

You'll probably never be allowed to sign up for D+ again. I'd only use charge backs as a final resort if I can't contact the company and/or I never want to do business with them in my life.

Just use a different payment system next time.

Re: Disney+ fans without answers after thousands hacked

#40
post #31
post #17

Why are Disney+ customers referred to as “fans”?

I guess similar reason Restaurants' customers are referred to as guests.

Huh, not really? A “fan” is an enthusiast or admirer. It implies a certain type of relationship to the thing you are a fan of.

I don’t know that “guest” implies anything similar, it’s just a visitor.

Post reply on HN