3 ms·
I agree that defaults are crucial, but it's weak passwords not rate limiting which is the fundamental issue here. Rate limiting doesn't help if you get in with
by andreasvc 11y ago
I agree that defaults are crucial, but it's weak passwords not rate limiting which is the fundamental issue here. Rate limiting doesn't help if you get in with the first try of admin:admin. Passwords should be generated from a secure random source and specified on a label on the device.
- utefan001 11y agoI agree with both of your arguments. From my experience ethically cracking accounts, rate limiting, non-default usernames, and non-default passwords should be the #1 priority for Michelle Obama or the next first man/lady. It is a very serious problem.
- utefan001 11y agoreplying to my own post. Exhibit A. http://money.cnn.com/2015/09/30/technology/china-opm-hack-us-spies/index.html http://money.cnn.com/2015/09/30/technology/china-opm-hack-us...