// Security at Hollywood Video
//
// by twirlz
//
// http://www.oldskoolphreak.com


Have you ever wanted to rent movies and not return them with no consequence?
Have you ever thought of how you could do this?  Well today I found out how
to do it with little to no effort.  Today, I called up to check my late fees
and to add someone to my account.  I had my card out with my member number on
it expecting that this would be a source of truth to my identity.  Much to my
surprise, it wasn't.  They wanted my name and phone number!  I gave it to
them and they gave me the balance of my account.  Then I asked if I could add
someone to my account over the phone.  Not expecting that they would say yes
I add, "If I can do that."  Again to my surprise, I could.

So now, how hard would it be to get that info and add yourself to anyone's
account?  The info you need is readily accessible in the phone book.  The
only problem would be knowing who the master name is on the account.  Or a
different way to add yourself would be to use the member number easily found
on their reciept.  I didn't try this method, but I assume it could work.

Now, myself, I find this to be a huge hole in their security.  It's not that
they would lose any more income, because you have to pay for the movies/video
games, but that someone could be stuck paying for a movie/game they didn't
rent.  Luckily, I dont' have my info in the phone book and I keep my reciepts.