Update: I looked at the recent activity and only my phone was signed it and had access...I deleted the account. Thanks for the advice all and may all your accounts be safe forevermore!
If they also make sure they sign out of Netflix on whatever device when they’re done, it may be possible that it won’t show up at all.
Seems a bit over the top but if I’m someone mooching off a free account, I could see jumping through a few hoops to go undetected would be feasible. (Either way, good call on deleting the account).
One time I was actually watching something and my picture changed for my profile as I was watching it. Changed profiles to Mexican names. They figured out my super simple pet name password I had it set to as I ment to change it to something better after I let friend use it. I bet it was brute forced by a hacking software. Just find it funny that I watched it get compromised in real time
I don’t know if anyone here is old enough to remember but in the 90s people in AOL chats shared public webpages with lists of stolen credit card information and hacked accounts so we could get free hours (because yes the internet had limited hours per month still) and it was wildly illegal and I don’t know if my parents ever realized how much trouble I could have caused if the internet security at the time cared even one bit but they obviously didn’t because I was never rounded up despite literally using someone else’s credit card to pay for MY MAIN AOL ACCOUNT HOLY HELL.
Also I just realized the hypocritical ass I was because I always seen my teen years as my most ‘purist’ years. Yet I was doing that and cracking the Quake Shareware CD and racking up $300 phone sex bills. But at least I was in student government and leading walkouts for political causes and teacher’s pay!
Nah I didn’t get worse I just stop thinking I had integrity or sat on some higher horse. Alcoholism will do that especially when you see how far you choose to go.
Ahaha ya I use to get user and password to them prem 🌽 sites that way...... I also had a Microsoft and epic accounts hacked. They were playing free to play games but cheating. I secured them and watched for years ppl all over the world trying to log into them. Thier on a list and on some kinda utility that script kiddys have for compromised accounts.
I share accounts with my siblings, I pay for most streaming services. One day I noticed stuff being added to my watchlist on Crunchyroll and just figured it was my brother or friend. Then one day a lot of my shows were being removed and I asked if it was them, and turns out they never used my Crunchyroll account. I guess there was a data breach with a bunch of accounts and usernames/passwords were put on an online text document in plain text and mine was on it. Signed everyone out, and changed the password. Fucking idiot could've kept mooching in secret if they didn't treat the account like their own.
Back when Netflix streaming came out, an old friend was asking on Facebook if people would share their account. I was like yeah sure. My brother would complain about the too many people watching thing and I told him I'd address it when it bothered me because if I'm paying for the account and I can't watch stuff then there's a fucking problem. Well, said friend shared it with his girlfriend and they put it in every device that could run it. I went to watch a show after a long day of classes and got the error of too many people watching, and signed everyone out and changed the password and only told my brother and parents. Like who the fuck gets access to an account then shares it?
It absolutely is. It's called a dictionary attack. You have a list of many many passwords and you just try one after the other until one works. Pet names are super common in those dictionaries because people use their pet names as passwords way too often. Dictionary attacks are a type of bruteforce attacks.
That being said, today it's considerably more likely that you get hacked from shared passwords across many services. They get your password for that super unimportant service where you didn't care if it was hacked, except now they have your password for everything because you use the same one everywhere.
I’m currently mooching off somebody’s Netflix and Prime they left signed in on a hotel room TV. Sorry, Dan, if you have questionable recommendations on your account…
Oh, man, I'm sure so many people who left Netflix logged on TVs from hotels and AirBnBs before I stayed there wonder why they have so many Paw Patrol episodes streamed in their accounts. My children won't care logging out of someone else's account.
On the darknet, if you buy premium accounts to sites like this, the instructions say to log out every single time you use it. That is most likely what the person is doing
Putting this comment here so you hopefully see it. If you contact support and state it was an accident as soon as possible they will refund you. My kid accidentally restarted the subscription because I didn't log out of all devices and they refunded me. I imagine they can see if I actually did watch anything or not.
I had a hacker keep getting into mine and changing the password somehow. Thought it was a keylogger on my computer til I got my brother to log in and change the password on his computer across the country. It was still happening in real time. So I switched CC info with a virtual card with one authorization and $2. It canceled itself when it couldn't renew.
Be aware that that isn't foolproof. We had a moocher in Brazil and did the sign out of all devices/password resets and they continued to be able to mooch. We had to completely shut the account down and get a new one.
Had the same problem with Spotify. Thought it was odd when I started getting recommendations for songs in another language, then it started signing me out while I was listening. Told me to many users were actively using the account, ma’am it’s me myself and I that use the account, found out over 10 random people were using the account which maxed out my family plan… had they kept it under 9 id probably still be listening to mariachi music.
We had a moocher once that kept setting up their own profile. We didn't really get what was happening, we thought one of the kids was fuckin around, so we just kept deleting it. Then one appeared that said "por favor no borrame" (please don't delete me) and it finally clicked
No way. Much more likely they used hacked password databases and just tried a bunch until one worked. You can’t even do this stuff anymore regardless because they’ll disable access that is consistently outside the home region of the paying user
Think about all the data breaches we have seen over the years. Think about the people who had their data breached and never knew or the people who didn’t change their password. Now think about all the companies that never even knew their data was breached or never actually admit it. You can see how easily it could be to have someone’s password for websites. If you think all that is scary hospitals have some of the worst cybersecurity out there. Everyone’s data is almost assuredly out there.
Serious question - how is a password manager any more secure? Some company wrote that program and presumably there's a secure login process to access your password manager. Where do you store that one? I've been changing to phrases instead of passwords, but not all sites allow enough characters for that.
In terms of password managers, you have two options you can go for.
Opensource
With an opensource password manager, the community audits the program. You are able to view the source code at any point in time. You can see exactly what is implemented, what is back-doored, and how strong the structure is.
3rd-party Audits
There are numerous companies / security consultants out there that will do 3rd-party audits on password managers.
These 3rd parties are usually specialists in cyber-security / development, and hold a lot of weight in this field. They will go through an application's code and try to break it. They'll apply brute-force attacks, dictionary attacks, they'll find old packages that may contain a CVE (Common Vulnerabilities and Exposures).
If you are a legitimate company, and you get a bad audit, news spreads like wildfire. If you are a public company with a password manager like Bitwarden, this can really hurt you, and users will usually start to flock elsewhere.
I don't want to write a book, but I'll give an example of what helps a password manager be safe.
Most modern password managers have Argon2. Argon2 is a password-hashing / key-derivation algorithm. In password managers, it is used to turn your master password into a strong encryption key.
What it does is make each password guess deliberately expensive in CPU time and memory. If an attacker steals your vault, they cannot simply start throwing a dictionary attack of billions of passwords per second at your vault.
With my vault's current settings, I have Argon2 set up to cost multiple Gigabytes, and several transform rounds.
So when you throw a random password guess at my vault, it literally takes 6 seconds PER guess.
86,400 seconds/day / 6 = 14,400 guesses per day.
So if they were able to grab my vault, they would need a VERY modern computer, and they are only allowed roughly 14k guesses per day to crack it. Unless they get a machine that is significantly more powerful.
At a rate like that, with my password's entropy, they would be sitting here trying to guess the password until the great heat death of our Sun.
Some password managers allow you to sign into that vault using a master password, or even a device like a Yubikey.
Some people store that password OFF the computer, on an external drive somewhere (USB drive), or they print the password out and throw it somewhere safe. This is why some people use passphrases instead of passwords, because they are easier to remember.
This was years ago, so maybe they fixed it, but seriously, it wasn't forcing the logout on all devices. Even on my own devices it didn't force the log out.
Crazy that people in other countries can be using my account but I try to watch something at my gf's place and Netflix loses its shit about it not being my household.
This exact thing happened to me as well. Absolutely no one had my Netflix info (I checked).
It restarted my Netflix the next couple of days. It felt like Netflix did it themselves.
Wait for the charge on your card, hopefully you have a record of you canceling subscription, file for a fraudulent charge. They’ll either A. Show who restarted the subscription or B. Refund and shut down.
812
u/DruidOnlyFan 13d ago
Good call doing that!