Disney+ Might Have a Notable Hacker Problem

The email change is particularly disturbing. A good security design would be to send the old email a notice of change request and give them a link that can always be used to undo that change (which might require the at the time older password as well).

Re: Disney+ Might Have a Notable Hacker Problem

#5

Post by deckar01 » Mon, Nov 18, 2019, 6:57 PM UTC

mjevans wrote: post #4

The email change is particularly disturbing. A good security design would be to send the old email a notice of change request and give them a link that can always be used to undo that change (which might require the at the time older password as well).

Most services don't do that. I have had my personal email account DDoSed before and requiring access to that inbox to change my email address would have been impossible for over a month.

Re: Disney+ Might Have a Notable Hacker Problem

#6

Post by amflare » Mon, Nov 18, 2019, 7:00 PM UTC

MaupitiBlue wrote: post #3

With 10m moms and dads signing up, I'm going to guess this is largely due to password reuse from prior hacks. Christmas123.

Yeah, this is my hypothesis. It is just a brute force attack using old email and passwords from previous hacks on other services.

Re: Disney+ Might Have a Notable Hacker Problem

#7

Post by Starkus » Mon, Nov 18, 2019, 7:10 PM UTC

Does anyone else still torrent?

I rarely watch a tv show or a movie, but when I do I just torrent it. I've been doing this since Limewire (which was a lot of really shitty porn at the time).

Showed my boys Princess Mononoke the other day - will show them the Mandalorian tonight, a buddy told me its pretty good

Re: Disney+ Might Have a Notable Hacker Problem

#8

Post by dhagz » Mon, Nov 18, 2019, 7:19 PM UTC

Extra fun tip I'm sort of nervous putting out there just because it's a potential attack vector: if you used the same email address as your existing MyDisneyExperience account, guess what? The password you set while registering for Disney+ is now the password for your MDE account - they were "merged" without notification (that I saw). So not only is your Disney+ account compromised, potentially the account you use to book vacations is as well.

EDIT: I have "merged" in quotes because I am not sure if changing your D+ email changes it for your MDE account as well, or vice-versa.

Re: Disney+ Might Have a Notable Hacker Problem

#9

Post by vinylkey » Mon, Nov 18, 2019, 7:20 PM UTC

Starkus wrote: post #7

Does anyone else still torrent? I rarely watch a tv show or a movie, but when I do I just torrent it. I've been doing this since Limewire (which was a lot of really shitty porn at the time). Showed my boys Princess Mononoke the other day - will show them the Mandalorian tonight, a buddy told me its pretty good

I'm sure some people do. I prefer to pay for things though.

Re: Disney+ Might Have a Notable Hacker Problem

#10

Post by bronco21016 » Mon, Nov 18, 2019, 7:23 PM UTC

Starkus wrote: post #7

Does anyone else still torrent? I rarely watch a tv show or a movie, but when I do I just torrent it. I've been doing this since Limewire (which was a lot of really shitty porn at the time). Showed my boys Princess Mononoke the other day - will show them the Mandalorian tonight, a buddy told me its pretty good

I think many people, even if they pay for the services, still torrent. It’s so much more convenient to have everything in Plex where it plays across all devices rather than chase down which app/device combo has the content you’re looking for.