Well. There’s a reason why Netflix is successful. They spent a lot of money and time operating as a tech-heavy company before becoming a content-heavy company. Just as an example, their Open Connect appliances ( https://openconnect.netflix.com/en/ ) are an impressive piece of technology that probably needed years of research. Launching a streaming service sounds simple in the paper but there are hundreds of complexit…
Disney+ fans without answers after thousands hacked
41–50 of 88 posts
Re: Disney+ fans without answers after thousands hacked
#42They can still torrent the content, which is what I'm doing after I paid for the first month of Disney+ and then found out their DRM disallowed Linux because of "security levels".
Re: Disney+ fans without answers after thousands hacked
#43Earlier quoted context omitted.
You'll probably never be allowed to sign up for D+ again. I'd only use charge backs as a final resort if I can't contact the company and/or I never want to do business with them in my life.
Just use a different payment system next time.
Re: Disney+ fans without answers after thousands hacked
#44Earlier quoted context omitted.
You issued a charge back with your credit card company for that, right?
Credit chargebacks are a really great way to end up being banned from a lot of companies' businesses going forwards. It's a last resort, not a "I'm too lazy to ask for a refund" strategy. It sounds like Disney+ was accepting refunds for preorders up until the launch day. Whether or not they can refund after presumably may depend on whether or not they can tell you've watched some of the content.
Re: Disney+ fans without answers after thousands hacked
#45Earlier quoted context omitted.
No idea about Netflix, but for Amazon I bet there’s less account sharing than the other two - because it’s your actual Amazon account. My Netflix account is the only one that doesn’t have a very complex password manager password, because I share it with family. I won’t share my amazon account because I won’t give it that sort of password. I guess Disney+ is much closer to Netflix on that scale.
Netflix definitely has trouble with this because they too lack the whole "delete all sessions" capability, so it's next to impossible to recover an account that has been compromised. My partner went through this, and Netflix support told her to delete the account and make a new one (losing all our recommendations in the process). Why they can't be bothered to add a "log out all users" feature the way something like G…
Re: Disney+ fans without answers after thousands hacked
#46Why are Disney+ customers referred to as “fans”?
Re: Disney+ fans without answers after thousands hacked
#47I am sure Netflix and amazon prime users also reuse their passwords, but I haven’t yet heard about users having the Disney+ issues with these accounts.
Even with identical security stance (which I doubt) across services I'd still expect this because A) pwnable accounts on existing services were most likely already pwned, whereas Disney+ has a mass onboarding of pwnable accounts, so it's Christmas for scrit kiddies and B) there's a ton of attention on Disney+ right now so there will be much more press scrutiny regardless of the true scale of the problem.
Re: Disney+ fans without answers after thousands hacked
#48Well. There’s a reason why Netflix is successful. They spent a lot of money and time operating as a tech-heavy company before becoming a content-heavy company. Just as an example, their Open Connect appliances ( https://openconnect.netflix.com/en/ ) are an impressive piece of technology that probably needed years of research. Launching a streaming service sounds simple in the paper but there are hundreds of complexit…
Doesn’t Disney own Hulu? They shouldn’t be new to the streaming video world.
Re: Disney+ fans without answers after thousands hacked
#49Earlier quoted context omitted.
At this point if they're rolling out a massive service without strong authentication controls and 2FA then it is their fault.
The attack surface is pretty small, though, isn't it? The most sensitive thing there is probably your viewing history and contact info. The additional overhead of supporting MFA (not from a technical standpoint, but from a user education one) would be tremendous, especially considering the customer base.
Re: Disney+ fans without answers after thousands hacked
#50http://cryto.net/~joepie91/blog/2016/06/13/stop-using-jwt-fo...