Roku said it discovered malicious hackers compromised more than half a million user accounts while investigating an earlier spate of account hacks.

Jesus, again already?

  • GnuLinuxDude@lemmy.mlEnglish
    0·
    3 months ago

    feels like you can’t even exist anymore without all your data getting leaked by someone who aggressively must consume as much of it as possible.

    Hulu you can say, “well at least I can pirate and avoid giving my info up.” But what can you do against things like when Equifax was hacked?

    There needs to be real privacy reform and real data privacy laws in the USA. bullshit ass second-tier country

    • slumberlust@lemmy.worldEnglish
      0·
      3 months ago

      Agreed the credit agency breaches are especially fucked since you don’t even have a say or not in participating.

      Then they make you PAY to freeze your account. It’s fucking racket.

  • LordPassionFruit@lemm.eeEnglish
    0·
    3 months ago

    At this point, why even consider getting a Roku?

    Note, I rarely, if ever, use a TV anymore, so smart TVs have never appealed to me. But Roku seems to be very anti consumer (between the forced arbitration and their ad policy), so I don’t understand why someone looking to get a smart TV would actually want a Roku over an alternative.

    Maybe I’m just poorly informed, but it just seems like almost anything else should be a better option?

    • Evilcoleslaw@lemmy.worldEnglish
      0·
      3 months ago

      IIRC I’ve read the Roku TVs at least can be set up in an offline mode. Some of the other brands I’ve heard get obnoxious when not allowed to connect.

  • FiveMacs@lemmy.caEnglish
    0·
    3 months ago

    I use VLC and an HDMI cable…fuck services from any company. They are all untrust worthy and don’t give a damn about you or their product provided you see ads and they sell your information.

  • AutoTL;DR@lemmings.worldBEnglish
    0·
    3 months ago

    This is the best summary I could come up with:

    Streaming giant Roku has confirmed a second security incident in as many months, with hackers this time able to compromise more than half a million Roku user accounts.

    In a statement Friday, the company said about 576,000 user accounts were accessed using a technique known as credential stuffing, where malicious hackers use usernames and passwords stolen from other data breaches and reuse the logins on other sites.

    Roku said in fewer than 400 account breaches, the malicious hackers made fraudulent purchases of Roku hardware and streaming subscriptions using the payment data stored in those users’ accounts.

    Roku said it refunded customers affected by the account intrusions.

    Following the security incidents, Roku said it rolled out two-factor authentication to users.

    Two-factor authentication prevents credential stuffing attacks by adding an additional layer of security to online accounts.

    The original article contains 213 words, the summary contains 135 words. Saved 37%. I’m a bot and I’m open source!

  • foggy@lemmy.worldEnglish
    0·
    3 months ago

    Aw, right when everyone was starting to like you guys so much, too. Bummer!

    I’ll put $10 on whatever org hacked them did it because theyre trying to put ads in HDMI lol.

    • yeehaw@lemmy.caEnglish
      0·
      3 months ago

      You either die the hero, or live long enough to become the villain. Roku is definitely in full villain stage.

  • _sideffect@lemmy.worldEnglish
    0·
    3 months ago

    We all fucking knew it!!!

    That’s why these mother fuckers forced that agreement a month ago

    • Giooschi@lemmy.worldEnglish
      0·
      3 months ago

      TBF the report says this was done using credential stuffing, so it wasn’t really Roku’s fault.

      • PlexSheep@infosec.pubEnglish
        0·
        3 months ago

        By sending a physical mail to their office, if what I’ve heard on smashing security is correct.

        • spizzat2@lemm.eeEnglish
          0·
          3 months ago

          Not just physical mail. The letter had to have the serial numbers of all devices associated with your account.

          Sure, let me go digging behind my TV with all of my free time so that I can give you information you already have, dicks.

        • locuester@lemmy.zipEnglish
          0·
          3 months ago

          Correct. Are you unfamiliar with stamps and paper? Sure it’s dumb and unfair that they force such a thing, but it takes 10 mins instead of 10 seconds. They’re not requiring hand delivery.

      • 5too@lemmy.worldEnglish
        0·
        3 months ago

        The agreement that was a pop-up you could only accept?

        My dog answered that before I got a look at it. Is that legally binding?

        • locuester@lemmy.zipEnglish
          0·
          3 months ago

          Sure that argument is fine and all, but you could also just mail them a letter.

          Both approaches are moot because you and I don’t have the money or time to fight a huge enterprise or to bride lobby government officials.

    • Altima NEO@lemmy.zipEnglish
      0·
      3 months ago

      Honestly though, a bunch of other businesses and services started pulling that arbitration shit recently too.

        • Altima NEO@lemmy.zipEnglish
          0·
          3 months ago

          Man I can’t remember off hand. I know LG has been doing that shit.

          I got an email in the last week from either PayPal or Comcast with regards to arbitration. I threw it away.

          Edit Found it, it was Hulu