4 ms·
> A lot of comments here are blaming the user for using the same username/password on multiple sites, allowing their account to be compromised. This is missing
by burnte 7y ago
> A lot of comments here are blaming the user for using the same username/password on multiple sites, allowing their account to be compromised. This is missing the point.
I disagree. This is the equivalent of blaming car manufacturers in the 70s for stolen cars when people left the keys in the cars. This is 2019. We've had PINs and passwords for decades. At some point people have to take responsibility for their own lives, their own property, and their own safety and take some things seriously. Nest and other companies can only do so much when the users keep doing stupid things like "password" for their password.
If you leave your front door unlocked when you go on vacation, yes, the crook should be jailed, but you should lock the darn door.
- rhacker 7y agoI have a lot of junk sites I log into that have a REALLY shitty password - it's not tied to my credit cards or any personal info, but it was just to get something working/going. It's not the same as leaving your keys in the personal car and more equivalent to the leaving the keys in the golf cart I rented at the golf resort. Sure there's still some negative consequences of that, but if the golf staff just tell everyone to leave their keys out in the open when they're done renting, then that's what people do. All of the "2000 era china cams" (foscam or whatever) I bought had a username password that only mattered if you were on a local network. I can imagine Nest users would probably assume that's what they were doing.
- burnte 7y ago1. Your examples aren't on the same level as Nest, and I do the same thing. If you happen to hack my account at some random forum so I could see someone's attachment, have at it. 2. If anyone was so dumb as to think a camera they can view on their phone while at work or on a cruise ship was "only on their local LAN" then, again, it's 2019 and there's no excuse for that. If you can't figure out that you're seeing your house from 2,000 miles away because it's connected to the internet, I don't feel bad for you.
- Waterluvian 7y agoI don't disagree fully. I'm all for personal responsibility. But it's largely a failure of the technology of passwords. You want me to remember 30 different passwords. That's a non start. So put all my eggs into a password manager basket. But I've been scared off those because I read that some are crap or Chinese or other scary things. And it fundamentally feels insane to give everything to one app on my phone. You haven't convinced this old bag of coal that's a good idea to do. So now I'm backed into what I perceive as a "smug young tech people corner" where I feel damned no matter what I do because clearly I need to be tech savvy but you insist I don't need to be, that this is just a baseline intelligence kind of problem. That whole story is a complete failure of technology, not the user.
- alistproducer2 7y agoUse keepass. It's an encrypted db with great mobile and desktop clients. Problem solved.
- Waterluvian 7y agoThat sounds great. So I need someone smart to tell me which manager to use. And also to have confidence in them. That's truly not awful. But it's not as easy as car keys.
- alistproducer2 7y agoUse the official desktop client for windows. The Linux version has to be run using wine, but there's a snap that makes the install a one-clicker. Use keepass2android for mobile. Use a keyfile and password just in case your password is compromised, the attacker would still need access to your machine to open the dB.
- guyzero 7y agoGreat, you want one password, use one password and two-factor authentication. TANSTAAFL