asciidisco / asciidisco/plugin.video.netflix
Parental pin back-door found.
- Dominant language
- Python
- Stars
- 1.2k
- Forks
- 213
- PR merge metrics
- No merged PRs in 30d
Description
*I'm submitting a ...*
- [x] bug report (possibly a bug?)
- [x] feature request
- [ ] support request
## General infomration
Raspberry pi environment.
### Prerequisites
* [x] Are you running the latest version?
### Description
[Description of the bug or feature]
Parental pin back-door found.
### Steps to Reproduce
1) Configure a parental pin from Netflix settings using a web browser (Account->Settings->Parental Control).
2) Any profile can be viewed and entered from Kodi side. The "kid" can therefore simply open the parent profile and view any show.
**Expected behavior:** [What you expected to happen]
Maybe ask for the pin when the profile is opened? Or when such a show is played.
**Actual behavior:** [What actually happened]
Shows that should have asked for a pin will play.
### Operating System
* [ ] Linux (x86/x64)
* [ ] OSX (x86/x64)
* [ ] Windows (x86/x64)
* [x] Linux (ARM)
* [ ] Android
Contributor guide
Research direction
The issue names no files, tests, or entry points; begin by reproducing the Netflix parental-control flow in the Kodi plugin on Linux ARM. Trace how profile access and playback are authorized, then verify that protected profiles or shows cannot be accessed without the PIN.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- authentication, security
- Issue type
- Bug
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100