3 ms·
A couple things just off the top of my head ... * Detect that a login occurred from an unrecognized IP and email the account holder to tip them off. * More st
by jawns 7y ago
A couple things just off the top of my head ...
* Detect that a login occurred from an unrecognized IP and email the account holder to tip them off.
* More stringent password requirements and a check against public leaked database registries to alert the user that the password they're using has been leaked.
But it seems like the bigger frustration is not that they did not prevent it, but that when it occurred it was difficult to raise the issue, and the response was tremendously inadequate.
- giarc 7y agoThe issue with your first suggestion is the whole idea of signing into your Nest account is that you are away from home, therefore your IP would be different. Not saying they can't do it, but accessing your device from a different IP is kind of the point.
- nicpottier 7y agoSure, but then you just log into your email and click a link and then you are in. Lots of sites do this and it would prevent this kind of attack in most cases. (assuming the leaked password was not also reused in email, but then you are in for an entirely different level of hurt anyways)