Hijacking a specific, known account is only one attack vector, and it is not the attack vector that has brought Ring's security into the news lately. Modern clo

Hijacking a specific, known account is only one attack vector, and it is not the attack vector that has brought Ring's security into the news lately. Modern cloud services provide throttling and other protection from brute force attacks: > Ring hackers' software works by rapidly checking if an email address and password on the Ring web login portal works; hackers will typically use a list of already compromised combinations from other services. If someone makes too many incorrect requests to login, many online services will stop them temporarily from doing so, mark their IP address as suspicious, or present a captcha to check that the user trying to login is a human rather than an automated program. Ring appears to have minimal protections in place for this though. Motherboard deliberately entered the wrong password to our account on the login portal while connecting from the Tor anonymity network dozens of times in quick succession. At no point did Ring try to limit our login attempts or present a captcha.