3 ms·
This doesn't sound like a "breach". Rather Roku failed to detect use of weak/compromised passwords by users by attackers who successfully authenticated. Obvious
by dboreham 3y ago
This doesn't sound like a "breach". Rather Roku failed to detect use of weak/compromised passwords by users by attackers who successfully authenticated. Obviously some user data could be leaked but presumably the attackers were selling the accounts for use by others to watch TV?
- faeriechangling 3y agoIt is a breach and credential stuffing attacks can be strongly mitigated with well known security measures. Such as using banned password lists, or measures to detect and block malicious attempts to access accounts by guessing passwords.