Announcement

Collapse

Fandango at Home Forum Guidelines

Fandango at Home Forum Guidelines

The Fandango at Home Forums are designed to help viewers get the most out of their Fandango at Home experience. Here, Fandango at Home customers may post information, questions, ideas, etc. on the subject of Fandango at Home and Fandango at Home -related issues (home theater, entertainment, etc). Although the primary purpose of these forums is to help Fandango at Home customers with questions and/or problems with their Fandango at Home service, there are also off-topic areas available within the Fandango at Home Forums for users to chat with like-minded people, subject to the limitations below.

Please post all comments in English. When posting a comment in the Fandango at Home Forums, please conduct yourself in a respectful and civil manner. While we respect that you may feel strongly about an issue, please leave room for discussion.

Fandango at Home Forum Guidelines

The Fandango at Home Forums are designed to help viewers get the most out of their Fandango at Home experience. Here, Fandango at Home customers may post information, questions, ideas, etc. on the subject of Fandango at Home and Fandango at Home -related issues (home theater, entertainment, etc). Although the primary purpose of these forums is to help Fandango at Home customers with questions and/or problems with their Fandango at Home service, there are also off-topic areas available within the Fandango at Home Forums for users to chat with like-minded people, subject to the limitations below.

Please post all comments in English. When posting a comment in the Fandango at Home Forums, please conduct yourself in a respectful and civil manner. While we respect that you may feel strongly about an issue, please leave room for discussion.

Fandango at Home reserves the right to refrain from posting and/or to remove user comments, including comments that contain any of the following:

1. Obscenities, defamatory language, discriminatory language, or other language not suitable for a public forum
2. Email addresses, phone numbers, links to websites, physical addresses or other forms of contact information
3. "Spam" content, references to other products, advertisements, or other offers
4. Spiteful or inflammatory comments about other users or their comments
5. Comments that may potentially violate the DMCA or any other applicable laws
6. Comments that discuss ways to manipulate Fandango at Home products/services, including, but not limited to, reverse engineering, video extraction, and file conversion.

Additionally, please keep in mind that although Fandango at Home retains the right to monitor, edit, and/or remove posts within Fandango at Home Forums, it does not necessarily review every comment. Accordingly, specific questions about Fandango at Home products and services should be directed to Fandango at Home customer service representatives.

Terms of Use - User Comments, Feedback, Reviews, Submissions

For all reviews, comments, feedback, postcards, suggestions, ideas, and other submissions disclosed, submitted or offered to Fandango at Home, on or through this Site, by e-mail or telephone, or otherwise disclosed, submitted or offered in connection you use of this Site (collectively, the "Comments") you grant Fandango at Home a royalty-free, irrevocable, transferable right and license to use the Comments however Fandango at Home desires, including, without limitation, to copy, modify, delete in its entirety, adapt, publish, translate, create derivative works from and/or sell and /or distribute such Comments and/or incorporate such Comments into any form, medium or technology throughout the world.
Fandango at Home will be entitled to use, reproduce, disclose, modify, adapt, create derivative works from, publish, display and distribute any Comments you submit for any purpose whatsoever, without restriction and without compensating you in any way. Fandango at Home is and shall be under no obligation (1) to maintain any Comments in confidence; (2) to pay to users any compensation for any Comments; or (3) to respond to any user Comments. You agree that any Comments submitted by you to the Site will not violate the terms in this Terms of Use or any right of any third party, including without limitation, copyright, trademark, privacy or other personal or proprietary right(s), and will not cause injury to any person or entity. You further agree that no Comments submitted by you to this Site will be or contain libelous or otherwise unlawful, threatening, abusive or obscene material, or contain software viruses, political campaigning, commercial solicitation, chain letters, mass mailings or any form of "spam."

You grant Fandango at Home the right to use the name that you submit in connection with any Comments. You agree not to use a false email address, impersonate any person or entity, otherwise mislead as to the origin of any Comments you submit. You are, and shall remain, solely responsible for the content of any Comments you make and you agree to indemnify Fandango at Home for all claims resulting from any Comments you submit. Fandango at Home takes no responsibility and assumes no liability for any Comments submitted by you or any third-party reserves the right to refrain from posting and/or to remove user comments, including comments that contain any of the following:

1. Obscenities, defamatory language, discriminatory language, or other language not suitable for a public forum
2. Email addresses, phone numbers, links to websites, physical addresses or other forms of contact information
3. "Spam" content, references to other products, advertisements, or other offers
4. Spiteful or inflammatory comments about other users or their comments
5. Comments that may potentially violate the DMCA or any other applicable laws
6. Comments that discuss ways to manipulate Fandango at Home products/services, including, but not limited to, reverse engineering, video extraction, and file conversion.

Additionally, please keep in mind that although Fandango at Home retains the right to monitor, edit, and/or remove posts within Fandango at Home Forums, it does not necessarily review every comment. Accordingly, specific questions about Fandango at Home products and services should be directed to Fandango at Home customer service representatives.

Terms of Use - User Comments, Feedback, Reviews, Submissions

For all reviews, comments, feedback, postcards, suggestions, ideas, and other submissions disclosed, submitted or offered to Fandango at Home, on or through this Site, by e-mail or telephone, or otherwise disclosed, submitted or offered in connection you use of this Site (collectively, the "Comments") you grant Fandango at Home a royalty-free, irrevocable, transferable right and license to use the Comments however Fandango at Home desires, including, without limitation, to copy, modify, delete in its entirety, adapt, publish, translate, create derivative works from and/or sell and /or distribute such Comments and/or incorporate such Comments into any form, medium or technology throughout the world.
Fandango at Home will be entitled to use, reproduce, disclose, modify, adapt, create derivative works from, publish, display and distribute any Comments you submit for any purpose whatsoever, without restriction and without compensating you in any way. Fandango at Home is and shall be under no obligation (1) to maintain any Comments in confidence; (2) to pay to users any compensation for any Comments; or (3) to respond to any user Comments. You agree that any Comments submitted by you to the Site will not violate the terms in this Terms of Use or any right of any third party, including without limitation, copyright, trademark, privacy or other personal or proprietary right(s), and will not cause injury to any person or entity. You further agree that no Comments submitted by you to this Site will be or contain libelous or otherwise unlawful, threatening, abusive or obscene material, or contain software viruses, political campaigning, commercial solicitation, chain letters, mass mailings or any form of "spam."

You grant Fandango at Home the right to use the name that you submit in connection with any Comments. You agree not to use a false email address, impersonate any person or entity, otherwise mislead as to the origin of any Comments you submit. You are, and shall remain, solely responsible for the content of any Comments you make and you agree to indemnify Fandango at Home for all claims resulting from any Comments you submit. Fandango at Home takes no responsibility and assumes no liability for any Comments submitted by you or any third-party.
See more
See less

VUDU site states Password Reset Required

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

    #31
    Re: Who to contact? Why did it take so long to inform customers?

    Originally posted by PrasannaG View Post
    Cathy -- We informed customers two weeks after the incident. We notified law enforcement immediately when the break-in was discovered. We worked to reconstruct the information that was on the drives while fully cooperating with law enforcement in their investigation. During the course of our preparation to notify customers, law enforcement requested that we delay notification in order to protect their investigation. We provided notification the day after law enforcement lifted their request to delay.

    No Social Security Numbers or complete credit card information was on these drives, and identity theft is more likely a result of losing that sort of information. Nonetheless we have arranged to have AllClear ID provide you with an identity protection service for one year. This service will be at no cost to you.
    And that's the key right there. It's to protect their investigation and not necessarily the individuals whose personal data was stolen. It would be interesting to see what the probability is of catching the perps when an announcement is delayed compared to when there is no delay in notification. Weeks is long enough for the individuals who stole the data to do damage with the names, addresses, email addresses, and DOB alone.

    I commend Vudu for having AllClear ID setup from the get go but the fact is that information still got into the wrong hands. All the thieves have to do is wait out the 1 year and they may be able to still cause damage to a good number of individuals; in all reality how many individuals will end up paying for the annual service after the year is up. Actually, this is still a lifetime issue.

    I would like an option to delete and/or update my CC info directly from the Vudu web site. I shouldn't have to call CS to have that done as it adds an additional human in the loop who could possibly compromise my data.

    Hopefully ALL data will be encrypted from here on out.

    EDIT: I still haven't received an email directly from Vudu letting me know my personal data had been compromised. Of course, when I logged in I was prompted to change my password and I have no issues receiving emails from Vudu when I make purchases.

    Comment


      #32
      Re: VUDU site states Password Reset Required

      I received the password reset e-mail and clicked on the "update your password" button, but it sends me to a blank page stating "could not find click.email.vudu.com".


      help

      Comment


        #33
        Re: VUDU site states Password Reset Required

        Originally posted by alexcaci View Post
        I received the password reset e-mail and clicked on the "update your password" button, but it sends me to a blank page stating "could not find click.email.vudu.com".


        help
        I believe this just temporary glitch of some network at the time. Please resend password reset email and try again.

        We don't have any report for this issue.

        Thanks,
        LLN

        Comment


          #34
          Re: Who to contact? Why did it take so long to inform customers?

          Originally posted by PrasannaG View Post
          Cathy -- We informed customers two weeks after the incident.
          Not true. I too had to reset my password earlier this week and only found out about this incident by watching the news about a week ago. When I had to reset my password I posted a message on the forum earlier this week to ask if the password reset was related to the incident and asked what other information was obtained. My thread has been deleted so I entered a case earlier today.

          If all this happened last month, why are we just now having to change our passwords? That should have happened immediately.

          Also, what about our UV account information...do we need to change that password as well?

          Comment


            #35
            Re: Who to contact? Why did it take so long to inform customers?

            Originally posted by LuzRinggold View Post
            Not true. I too had to reset my password earlier this week and only found out about this incident by watching the news about a week ago. When I had to reset my password I posted a message on the forum earlier this week to ask if the password reset was related to the incident and asked what other information was obtained. My thread has been deleted so I entered a case earlier today.

            If all this happened last month, why are we just now having to change our passwords? That should have happened immediately.

            Also, what about our UV account information...do we need to change that password as well?
            The incident happened on March 24, Vudu sent out email and posted to the site on April 9. That is only 16 days, so saying they notified customers two weeks after is true.

            The UV account would need to be updated if you used the same password as was used on VUDU.

            Comment


              #36
              Re: Who to contact? Why did it take so long to inform customers?

              Originally posted by Blurayfan View Post
              The incident happened on March 24, Vudu sent out email and posted to the site on April 9. That is only 16 days, so saying they notified [some] customers two weeks after is true.

              The UV account would need to be updated if you used the same password as was used on VUDU.
              I still haven't received an email from Vudu regarding this situation. So it appears they only notified some customers.

              Comment


                #37
                Re: VUDU site states Password Reset Required

                I never received an email either. My first attempt to find out about this earlier this week resulted in my thread being deleted.

                Regarding encryption...obviously all credit card information must be encrypted and probably is because of the PCI security standards and not being compliant would mean that VUDU would pay higher fees and possibly fines for being out of compliance. But something else to be considered is our Personally Identifiable Information. PII should also be encrypted and protected by VUDU. Things like our email addresses, phone number, and our name...even our IP address is considered to be PII by the government. The government recommends encryption to protect personal information when storing and when transmitting the information.

                A password would also need to be encrypted. The fact that we had to change our passwords tells me that they are not encrypted and secured. There is no reason for anyone to know my password but me.

                Comment


                  #38
                  Re: VUDU site states Password Reset Required

                  Originally posted by LuzRinggold View Post
                  I never received an email either. My first attempt to find out about this earlier this week resulted in my thread being deleted.

                  Regarding encryption...obviously all credit card information must be encrypted and probably is because of the PCI security standards and not being compliant would mean that VUDU would pay higher fees and possibly fines for being out of compliance. But something else to be considered is our Personally Identifiable Information. PII should also be encrypted and protected by VUDU. Things like our email addresses, phone number, and our name...even our IP address is considered to be PII by the government. The government recommends encryption to protect personal information when storing and when transmitting the information.

                  A password would also need to be encrypted. The fact that we had to change our passwords tells me that they are not encrypted and secured. There is no reason for anyone to know my password but me.
                  If you read the Vudu reps response, they confirm that the passwords were encrypted, however, it is just be a matter of time before the info gets decrypted, if that was the target of the theft.

                  Comment


                    #39
                    Re: VUDU site states Password Reset Required

                    Originally posted by Speedaddict81 View Post
                    If you read the Vudu reps response, they confirm that the passwords were encrypted, however, it is just be a matter of time before the info gets decrypted, if that was the target of the theft.
                    If the password is being stored encrypted then it's not being done correctly. Passwords, like PINs, should never be stored. When a password/PIN is being set it gets "encrypted" using a one-way encryption algorithm, then that value is encrypted using AES or some other secure encryption algoritm. In other words, there isn't really a way to decrypt the password back to clear text form. When a user is being authenticated, they enter their password and it gets encrypted and the stored password gets decrypted to the one-way encrypted value. Then the computer systems are comparing two one-way encrypted values against each other.

                    If this is what VUDU is doing then I guess the password reset is just a precaution...either that or they don't have much faith in their encryption and data security measures.

                    Comment

                    Working...
                    X