News for hackers. Stuff that matters.

A comment on Google Cast is now built-in to Chrome. Parent comment

Re:Google Cast is now built-in to Chrome by ihsw on Monday August 29, 2016 @05:02PM (#12385281)
It is inevitable that plaintext username/password will be used. This is why I am terrified.
[ Parent | on HN ]
Re:Google Cast is now built-in to Chrome by tracker1 on Monday August 29, 2016 @06:07PM (#12385825)
Most likely it isn't a username/password but an authenticated URL... https://foo.bar.netflix.com/(UUID-OR-SIMILAR) where that is resolved to a resource, and the user authentication is valid for X hours from start...

There's no need for a plain username+password to be used... it's just an authentication token as the resource or part of the url.

[ Parent | on HN ]
Re:Google Cast is now built-in to Chrome by w-ll on Monday August 29, 2016 @06:19PM (#12385913)
They really just need to send the Netflix cookie from your browser to the chrome cast. But I don't think they do that, like sarnowski said, i believe they put some data in the url thats like a 1 time key for your account and the video you want to watch.
[ Parent | on HN ]
Re:Google Cast is now built-in to Chrome by corobo on Tuesday August 30, 2016 @04:34AM (#12388361)
Are you really terrified that your Netflix username and password may be revealed? It's a bit much.
[ Parent | on HN ]