Password Reuse Notification on Three Now

Forums › Online streaming services › Password Reuse Notification on Three Now

FieldMouse

112 posts

Master Geek
+1 received by user: 15

#303118 17-Jan-2023 16:09

I was having trouble logging on to Three Now on my TV, so decided to try on my iPad.
I deleted the Three Now app and downloaded it again. Then tried to log in.

It let me in, but displayed a message that my password was in a data leak and that I should change my password immediately. I don’t know if this is genuine or a scam.

Also I don’t know what data leak? Is it Three Now or some other website. I must admit that that password has been used on several sites.

Thoughts

Mod Edit MM: Edited title for accuracy.

mentalinc

3384 posts

Uber Geek
+1 received by user: 1023

Trusted

#3022834 17-Jan-2023 16:29

They are probably using the haveibeenpwned dataset/API to test if your password is strong.

The password you have used has been detected as one in their dataset of another breach.

Suggest the subject is changed as this isn't a data leak, it's you choosing a poor password.

CPU: AMD 5900x | RAM: GSKILL Trident Z Neo RGB F4-3600C16D-32GTZNC-32-GB | MB: Asus X570-E | GFX: EVGA FTW3 Ultra RTX 3080Ti| Monitor: LG 27GL850-B 2560x1440

Quic: https://account.quic.nz/refer/473833 R473833EQKIBX

freitasm

BDFL - Memuneh
80646 posts

Uber Geek
+1 received by user: 41029

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#3022858 17-Jan-2023 17:03

We do the same here at Geekzone - if the password or the combination of username/password is listed in the haveibeenpwned API then you can't access your account until you change your password to something different.

That doesn't mean the data leaked on Three Now, or on Geekzone. You could be re-using the same password in more than one site for example, or have it leaked somewhere else.

Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

FieldMouse

112 posts

Master Geek
+1 received by user: 15

#3022892 17-Jan-2023 17:52

Thanks. Definitely have used it on more than one site.

I have asked for advice on password managers in a different forum

richms

29098 posts

Uber Geek
+1 received by user: 10207

Trusted

Lifetime subscriber

#3023178 18-Jan-2023 12:16

That is probably the worst service to enforce long complex passwords on since you have to enter it on TVs with D pads and that stupid onscreen keyboard. I know of people that have given up on TVNZ on their TV when it made them have to log in and stuff.

Richard rich.ms

freitasm

BDFL - Memuneh
80646 posts

Uber Geek
+1 received by user: 41029

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#3023185 18-Jan-2023 12:33

richms:

That is probably the worst service to enforce long complex passwords on since you have to enter it on TVs with D pads and that stupid onscreen keyboard. I know of people that have given up on TVNZ on their TV when it made them have to log in and stuff.

This is usually solved by having a page to enter a code generated on the TV app to link it to your account. Some overseas streaming services do this. It is a lot easier to then setup/login to these services.

Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

richms

29098 posts

Uber Geek
+1 received by user: 10207

Trusted

Lifetime subscriber

#3023191 18-Jan-2023 12:46

freitasm:

This is usually solved by having a page to enter a code generated on the TV app to link it to your account. Some overseas streaming services do this. It is a lot easier to then setup/login to these services.

Yes, it is a problem that is well solved by overseas streaming services, like many of the problems that only seem to happen on the local streaming services.

Richard rich.ms

HP

Shop now for HP laptops and other devices (affiliate link).

rugrat

3140 posts

Uber Geek
+1 received by user: 944

Lifetime subscriber

#3023288 18-Jan-2023 15:02

FieldMouse:

I was having trouble logging on to Three Now on my TV, so decided to try on my iPad.
I deleted the Three Now app and downloaded it again. Then tried to log in.

It let me in, but displayed a message that my password was in a data leak and that I should change my password immediately. I don’t know if this is genuine or a scam.

Also I don’t know what data leak? Is it Three Now or some other website. I must admit that that password has been used on several sites.

Thoughts

Was this generated by Three Now applic, or the IPad. The iPad will display this message when logging in somewhere using a leaked password.

On mine if I go to settings, passwords, just below password options at top it has security recommendations, tap on this and it shows passwords you have used on more then one site (and list of other sites) and also passwords that have appeared on leak lists.

The password could have been leaked from different site, user name, just means that someone has used that password somewhere, and it’s on a leaked list so hackers could try and use it as a guess for a different site.

KrazyKid

1247 posts

Uber Geek
+1 received by user: 616

#3023305 18-Jan-2023 15:46

Having to add a password to TVNZ+ and TV3 annoyed me so much.
Who wants to tyoe in a complex password on a TV remote when all they are using it for it to ID me for avertising statistics.
TVNZ+ has the simplest, most hackable password in the world for me.

I choose ease of data entry over all other factors

/RANT

k1w1k1d

1711 posts

Uber Geek
+1 received by user: 1305

#3023346 18-Jan-2023 19:11

I have a simple password that I use for all these unimportant sites that insist on a password.

Last time I looked it had been pwned about 45 times.

BlakJak

1329 posts

Uber Geek
+1 received by user: 735

Trusted

#3025211 21-Jan-2023 16:02

Unique passwords everywhere + password manager = win.

Use a relatively simple password for systems that have $hitty UX for entering the password - like a TV with no smartphone linking. But def. don't re-use a password.

I find that i'm prompted so infrequently to re-enter creds that it's not really a huge hassle.

No signature to see here, move along...