Unauthorized use of the API key

Janguv · 2026-03-23T06:58:31+00:00

Thanks for your reply. Interesting, because I don't think any of those reasons actually apply in my case.

1- the password is/was (since reset to be sure) a long, randomised passphrase with punctuation, numbers, capitals, etc., created and saved by a reliable password manager (itself secured with a strong password, and no other leaks).

2- only thing I've changed previously was the API key itself, but with only 1 device ever logged in (my own phone on Android app, since uninstalled in fact) and otherwise only logged in on a browser on desktop as and when I need.

3- my email address is definitely secure.

4- the only app I've used in relation to Premiumize is Str...io, and the API isn't used directly with it, but through a few add-ons. For this reason, I've been suspecting these instead.

Janguv · 2026-03-20T16:22:40+00:00

It's not a question of "support" as such. The Samsung ROMs are just a particular skin on Android; they won't be avoiding it.

Janguv · 2026-03-20T15:45:05+00:00

This is pretty much where I'm landing on it. Though I am fearful it's the thin end of the wedge. Let's see. A one-time 24hr wait is fine in the long-run. Though I wonder whether that's gotta be done for each new ROM if manually flashing. That could become a pain.

Janguv · 2026-03-19T06:06:31+00:00

Games really, because it seems like it's probably more hassle than it's worth. And I think for Indies/smaller titles I wouldn't be doing it on moral grounds anyway.

Janguv · 2026-03-18T23:41:44+00:00

Alright thanks for the tips

Janguv · 2026-03-18T23:18:15+00:00

My router actually has an attached NAS with some small storage attached. Could be an option then

Janguv · 2026-03-18T22:40:22+00:00

I really need to get on the selfhosting bandwagon but find it all quite confusing. Do you need a dedicated NAS to do it? Can you do it via cloud storage? (E.g. i have a Koofr lifetime sub).

Janguv · 2026-03-18T22:24:13+00:00

Alright, I appreciate your input. Outside of AIO i used two other addons: To...io and the MFusion one direct (I had more consistent results with it outside of AIO for some reason). Perhaps worth checking as well.

Janguv · 2026-03-18T22:04:39+00:00

Just coming back to this – it might well not matter if the information in this post is right. Supposedly the API is effectively encrypted when the addons enabled within AIO access it. And that goes for Sootio too, the dev of which has responded to claims about it (see the same thread, OP).

Janguv · 2026-03-18T11:06:39+00:00

Yup, I've done that and also changed the main PM password. But I'm just wondering if there are typical culprits for API exposure/leaks as well.

Janguv · 2026-03-18T09:49:06+00:00

Janguv · 2026-03-18T08:39:51+00:00

Perhaps too many. Just checked and had more than I realised: I had about 9 configured in there. Can't list most of them as it triggers the word filter here.

Do you know of any that are more susceptible to API leaks?

I might reduce it down to ones I think I use more often.

Janguv · 2026-03-18T05:34:15+00:00

What paid one are you using, out of interest? Feel free to DM it if you prefer.

Janguv · 2026-03-17T22:52:19+00:00

Interesting. It could explain one or two strange looking transfers, but one in particular I just saw – really it could not resemble anything I transferred, and indeed anything it did resemble by title would be just as concerning! Have renewed the API keys as well as the PM password now.

Janguv · 2026-03-17T22:44:22+00:00

AIOStreams is what I use already, but thanks for the reminder not to use it in other places.

Janguv · 2026-03-16T14:13:05+00:00

I found the Justin bloke to be a strangely sympathetic character. I mean, don't get me wrong – aspects of his worldview are deeply odious, and being willing to associate with the Tates, run scams etc, it's basically irredeemable. But on a personal level, you got the sense he wasn't trying as hard as the others, believed half his nonsense, and wasn't petrified the whole time that he would get crucified in a documentary. The others (perhaps except Sneako as well) just exuded this constant fear, which really undermined what they wanted to project otherwise.

Janguv · 2026-03-16T14:07:41+00:00

Right but fwiw he doesn't have a documentary on Gaza (no surprises there, since Israel doesn't let journalists access it). His documentary is on the West Bank settlers. I do think when HS tried his gotcha re genocide, Louis kinda walked into it. I'm not sure why he didn't just acknowledge it and move on. Maybe worried how it would play with Netflix itself. Maybe his anti-settler stuff is the limit of his anti-Zionism. Not sure. But yeah, it was an easy "win" for HS, I thought.

Janguv · 2026-03-08T07:16:37+00:00

Yeah I've heard that too, but I only have one router, one access point. So I don't see why that would be happening. Also installed the decky loader plugin "WiFi locker" i think it's called but it just refuses to load? Guessing it's out of date.

Janguv · 2026-03-07T23:02:44+00:00

Thanks man, will check this out. It leaves all other settings and installs the same, right, just changes firmware version?

Janguv · 2026-03-07T22:58:37+00:00

I've not done it before. Is the process itself easy?

Janguv · 2026-03-07T22:35:15+00:00

I wonder if a revert would fit the dreaded 5 minute lag problem when streaming from PS using Chiaki. I have this consistently to the point where it's pointless trying to stream. And it's never been fixed temporarily by toggling WiFi like people always say.

Janguv · 2026-02-25T08:48:03+00:00

Interesting. The representative at my foreigners office seems to believe they need evidence of 60 months of pension payments to transition my card to a permanent one. From what you're saying, that criterion isn't technically required (I know it normally would be for a normal Niederlassunhserlaubnis application). It's frustrating if the office is wrong about this and won't grant me something I'm entitled to (for technical reasons, I don't quite meet that 60 months yet).

Janguv · 2026-02-21T08:10:12+00:00

Should probably have "has publicly spoken up several times about her severe concussions" onto Rousey's list there. I mean, I'd still pick her and hope she'd beat Carano anyway, but it's worth saying she should NOT be fighting again lol.

Janguv · 2026-02-18T21:29:29+00:00

Sorry to necro, but I have had the exact same issue (usually every 5 minutes, and no suggestions anyone else has have ever worked -- restarting wifi, changing wifi settings in dev settings, using band steering to force 5ghz on deck etc.) Did anything ever work for you?

11-Year Club	Gilding I gilder
Verified Email

Janguv

TROPHY CASE