Related: Ask HN: Fighting back against Roku's forced arbitration? https://news.ycombinator.com/item?id=39503941 (2024-02-25)
It's related as in they are both things about Roku but it's too early to tell if these two events are actually related in some more meaningful way.
Roku data breach: Over 15k accounts affected
51–60 of 95 posts
Re: Roku data breach: Over 15k accounts affected
#52Sure wish CISA and SEC would effectively monitor and fine companies that suffer data breaches. After all, we're not being paid for that data, yet we remain the victim of their actions.
Re: Roku data breach: Over 15k accounts affected
#53Re: Roku data breach: Over 15k accounts affected
#54how limited and what subs
Re: Roku data breach: Over 15k accounts affected
#55Why does this notification say passwords were compromised and not password hashes? Certainly Roku engineers were better than that?
Re: Roku data breach: Over 15k accounts affected
#56> As a result, unauthorized actors were able to obtain login information from third-party sources and then use it to access certain individual Roku accounts. After gaining access, they then changed the Roku login information for the affected individual Roku accounts, and, in a limited number of cases, attempted to purchase streaming subscriptions. how limited and what subs
Re: Roku data breach: Over 15k accounts affected
#57[flagged]
Re: Roku data breach: Over 15k accounts affected
#58It sure would be nice to know what was exposed in the hack. Given they are an advertisement company.
Re: Roku data breach: Over 15k accounts affected
#59Earlier quoted context omitted.
My kids have been watching TV, they must have accepted it on my behalf. They should have required the parental control pin to accept it.
Can anyone who understands legal stuff explain this? As a layman Roku’s popup seemed wildly insufficient verification that the account owners were the ones accepting these TOS.
Re: Roku data breach: Over 15k accounts affected
#60Earlier quoted context omitted.
Reporting requirements exist [1], civil and criminal penalties will require Congressional action. Definitely gross that companies are using forced arbitration to avoid liability for their breaches (first 23andme, now Roku). Call your congressperson. Also, if you are impacted/have standing, consider an FTC complaint [2] and contacting your state’s attorney general. [1] https://www.sec.gov/news/press-release/2023-139 […
> Call your congressperson. I'm sure that after my phone call, my congressperson will drop all the things he is being paid thousands of lobbying dollars to do on behalf of his donors to get right on this. Sorry for the snark, but normal people are powerless to do anything about these shenanigans.