3 ms·

> We didn't give random people loans in your name, your identity was stolen. When you shift responsibility from the provider to the customer, you play right in

> We didn't give random people loans in your name, your identity was stolen. When you shift responsibility from the provider to the customer, you play right into the security blame game.

lotsofpulp 8y ago
Analogies are useful for illustrating a thought, not for supporting arguments. And identity theft (where the victim can do nothing to protect themselves) is not analogous in the first place. Using multi factor authentication, using long, difficult passwords, and don’t let your security questions be obvious. If someone knocks me out, uses my finger to TouchID into my bank’s app and transfer money, that’s the price I pay for the convenience of not wanting to login with my password. Same with using weak passwords and questions.
- WrtCdEvrydy 8y ago
  You can't seriously say that a multi-million dollar company can't enforce those security features by default. This is the same as having a car recall and having people dying before the letters reach their homes and saying 'they should have known this company's cars could explode'
  - lotsofpulp 8y ago
    I don't understand the purpose of using analogies (valid or not) in this discussion. Apple could have forced people to use multi factor authentication, and whether or not they should have forced it is a separate discussion that can be had. But I was claiming that your original comment was that iCloud was "hacked" is incorrect, since it implies there was some weakness on Apple's technical backend.
    - WrtCdEvrydy 8y ago
      Not forcing secure by default practices in your secure devices is a weakness on Apple's technical backend. Maybe they should take a couple of notes for their broken cloud implementation from another phone manufacturer in the space that takes security seriously: https://www.theguardian.com/commentisfree/2014/sep/30/iphone-6-encrypted-phone-data-default https://www.theguardian.com/commentisfree/2014/sep/30/iphone... https://www.cso.com.au/article/577197/apple-tells-ios-9-developers-use-https-exclusively/ https://www.cso.com.au/article/577197/apple-tells-ios-9-deve...

> We didn't give random people loans in your name, your identity was stolen. When you shift responsibility from the provider to the customer, you play right into the security blame game.

lotsofpulp 8y ago

Analogies are useful for illustrating a thought, not for supporting arguments. And identity theft (where the victim can do nothing to protect themselves) is not analogous in the first place. Using multi factor authentication, using long, difficult passwords, and don’t let your security questions be obvious. If someone knocks me out, uses my finger to TouchID into my bank’s app and transfer money, that’s the price I pay for the convenience of not wanting to login with my password. Same with using weak passwords and questions.

WrtCdEvrydy 8y ago
You can't seriously say that a multi-million dollar company can't enforce those security features by default. This is the same as having a car recall and having people dying before the letters reach their homes and saying 'they should have known this company's cars could explode'
- lotsofpulp 8y ago
  I don't understand the purpose of using analogies (valid or not) in this discussion. Apple could have forced people to use multi factor authentication, and whether or not they should have forced it is a separate discussion that can be had. But I was claiming that your original comment was that iCloud was "hacked" is incorrect, since it implies there was some weakness on Apple's technical backend.
  - WrtCdEvrydy 8y ago
    Not forcing secure by default practices in your secure devices is a weakness on Apple's technical backend. Maybe they should take a couple of notes for their broken cloud implementation from another phone manufacturer in the space that takes security seriously: https://www.theguardian.com/commentisfree/2014/sep/30/iphone-6-encrypted-phone-data-default https://www.theguardian.com/commentisfree/2014/sep/30/iphone... https://www.cso.com.au/article/577197/apple-tells-ios-9-developers-use-https-exclusively/ https://www.cso.com.au/article/577197/apple-tells-ios-9-deve...