oooh, the redbox uses full AES encryption!
-
-
Medea Vanamonde🏳️⚧️ ♀replied to Foone🏳️⚧️ last edited by
@foone you got one?
-
OH HEY BAD NEWS:
when someone opens up the hard drive of a redbox unit, they can pull a file which has a complete list of titles ever rented, and the email addresses of the people who rented them, and where and when
-
DJ Sundog - from the toot-labreplied to Foone🏳️⚧️ last edited by
@foone there's probably a german word for the combination of "big oof" and "as could be expected" but damned if I know what it is, but that, that's the vibe
-
@foone huh. That feels like it should be illegal but somehow isn’t. The government *requesting* that data absolutely is…
-
@foone Rented from that unit or from any unit? Either way that doesn’t seem good
-
@h0m54r just from that unit.
-
@foone hmm, that's a class action
-
the unit I've got an image for has records going back to at least 2015.
I was able to easily match one of them to a real name
-
@rgegriff against who?
Redbox inc is gone
-
I have 2471 transactions here.
-
@foone
that you have so _few_ transactions for nearly 10 years on that one drive may explain why redbox has ceased to be, has joined the parrot eternal.(one rental per day is par for an AirBNB, but unless their costs were really really low that's very bad retail.)
-
@foone Does it say how many times? I mean, if I^H a friend rented Gigli every weekend for three years, does it show that?
-
Somebody I'll call Dave Fakename rented The Giver and The Maze Runner in Morganton, NC on 2015-05-23 at 6:43pm
-
@Cloudscout yes
-
@foone this is nutters, WHY IS THIS ON THE DRIVE?!?!, why is it in PLAIN TEXT?!?!? why isn’t the drive encrypted?!?!?!
-
@bosh all of those things would require competence that redbox inc has famously never shown
-
@foone how many classes are you trying to create for these banger class action lawsuits?
Seriously you should team up with a law firm and start cashing in on this.
Seems like a clear violation of the Bork Bill to me.
https://en.m.wikipedia.org/wiki/Video_Privacy_Protection_Act
-
found a THIRD set of encryption code.
this one is 3des instead of AES, and YEP they still hardcode the passkeys -
@todb the company is gone. who are we suing?
