3 ms·
This story is pretty creepy, but at this point, people need to own up to the idea that weak passwords and passwords that are re-used across sites are going to b
by chadash 8y ago
This story is pretty creepy, but at this point, people need to own up to the idea that weak passwords and passwords that are re-used across sites are going to be compromised at some point [1]. There's nothing Nest can really do about this, other than to mandate two-factor auth, which most people don't seem to like [2].
[1] I'm happy to see in my personal experience that even my non-technical friends are starting to use password managers.
[2] According to https://hackernoon.com/why-do-most-people-ignore-two-factor-authentication-1bbc49671b8e https://hackernoon.com/why-do-most-people-ignore-two-factor-..., "less than 10 percent of active Google accounts use two-factor authentication. Furthermore, as per findings of the Pew Research Center, password managers are only used by approximately 12 percent of Americans." If people aren't using 2FA for their gmail account, which is arguably the most important account to protect, then they probably aren't using it anywhere else.
- benwad 8y agoThey could check the user's password against the HIBP database - many users aren't aware of these data breaches and this would prevent them using one of those passwords as well as making them aware of the problem.