Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Roku data breach: Over 15k accounts affected

claimdepot.com

Post reply on HN
Print view View original

61–70 of 95 posts

Re: Roku data breach: Over 15k accounts affected

#61

Post by RcouF1uZ4gsC »

cadence- wrote: post #48

Looks like Ars Technica called it: Roku is also taking heat for using forced arbitration at all, which some argue can have one-sided benefits. In a similar move in December, for example, 23andMe said users had 30 days to opt out of its new dispute resolution terms, which included mass arbitration rules (the genetics firm let customers opt out via email, though). The changes came after 23andMe user data was stolen in…

If enough people do it, forced arbitration can actually end up being expensive for the company. iIRC, there was a case where the company itself tried to get out of the forced arbitration and go to court since it was a pain to try to handle a massive number of individual arbitration cases.

I wonder how Roku would react if every Roku user filed an arbitration case since your data was at risk.

Re: Roku data breach: Over 15k accounts affected

#63

Post by zonkerdonker »

laweijfmvo wrote: post #52
brevitea wrote: post #5

Sure wish CISA and SEC would effectively monitor and fine companies that suffer data breaches. After all, we're not being paid for that data, yet we remain the victim of their actions.

First step, stop buying or using any product that monetizes your data

Second step: become proficient at bushcraft, because thats where youll be spending the rest of your life after following step one.

Re: Roku data breach: Over 15k accounts affected

#64

Post by rco8786 »

laweijfmvo wrote: post #52
brevitea wrote: post #5

Sure wish CISA and SEC would effectively monitor and fine companies that suffer data breaches. After all, we're not being paid for that data, yet we remain the victim of their actions.

First step, stop buying or using any product that monetizes your data

This is functionally impossible in much of modern society.

Re: Roku data breach: Over 15k accounts affected

#65

Post by DinaCoder98 »

toomuchtodo wrote: post #6
brevitea wrote: post #5

Sure wish CISA and SEC would effectively monitor and fine companies that suffer data breaches. After all, we're not being paid for that data, yet we remain the victim of their actions.

Reporting requirements exist [1], civil and criminal penalties will require Congressional action. Definitely gross that companies are using forced arbitration to avoid liability for their breaches (first 23andme, now Roku). Call your congressperson. Also, if you are impacted/have standing, consider an FTC complaint [2] and contacting your state’s attorney general. [1] https://www.sec.gov/news/press-release/2023-139 […

[flagged]

Re: Roku data breach: Over 15k accounts affected

#66

Post by DinaCoder98 »

rco8786 wrote: post #60
ryandrake wrote: post #13

Earlier quoted context omitted.

> Call your congressperson. I'm sure that after my phone call, my congressperson will drop all the things he is being paid thousands of lobbying dollars to do on behalf of his donors to get right on this. Sorry for the snark, but normal people are powerless to do anything about these shenanigans.

Super cynical. Those people hold outsized power, but they are not invincible by any stretch of the imagination. We hold the power in that we elect the public officials. They care about what we think also.

> We hold the power in that we elect the public officials.

Very optimistic attitude!

Re: Roku data breach: Over 15k accounts affected

#67

Post by rco8786 »

bee_rider wrote: post #22
jayknight wrote: post #16

Earlier quoted context omitted.

My kids have been watching TV, they must have accepted it on my behalf. They should have required the parental control pin to accept it.

Can anyone who understands legal stuff explain this? As a layman Roku’s popup seemed wildly insufficient verification that the account owners were the ones accepting these TOS.

Not an expert but have worked on similar stuff and there’s no specific controls that I know of around specifically verifying that the account owner sees these things, just that they’re made available and the account is notified.

Re: Roku data breach: Over 15k accounts affected

#68

Post by mtlynch »

RcouF1uZ4gsC wrote: post #61
cadence- wrote: post #48

Looks like Ars Technica called it: Roku is also taking heat for using forced arbitration at all, which some argue can have one-sided benefits. In a similar move in December, for example, 23andMe said users had 30 days to opt out of its new dispute resolution terms, which included mass arbitration rules (the genetics firm let customers opt out via email, though). The changes came after 23andMe user data was stolen in…

If enough people do it, forced arbitration can actually end up being expensive for the company. iIRC, there was a case where the company itself tried to get out of the forced arbitration and go to court since it was a pain to try to handle a massive number of individual arbitration cases. I wonder how Roku would react if every Roku user filed an arbitration case since your data was at risk.

The Roku lawyers seem to be defending specifically against this.

The new terms have language that say that if enough people enter arbitration at the same time, they have to do one big "mass arbitration."

Re: Roku data breach: Over 15k accounts affected

#69

Post by rco8786 »

DinaCoder98 wrote: post #66
rco8786 wrote: post #60

Earlier quoted context omitted.

Super cynical. Those people hold outsized power, but they are not invincible by any stretch of the imagination. We hold the power in that we elect the public officials. They care about what we think also.

> We hold the power in that we elect the public officials. Very optimistic attitude!

Is it? Just a plain fact. At least in the US
Post reply on HN