3 ms·

Amazon's response seems quite defensive. They are typically a bit black box when it comes to security issues.

• oh_sigh 7y ago
  Maybe it's because literally every password protected service is vulnerable to users reusing passwords on other insecure sites. It would be like a website writing an expose on how ford trucks are killing hundreds of drivers and expecting a response from ford, but when you read the details it's because users are driving their trucks into brick walls, something that literally every car on the market is susceptible to.
  • roywiggins 7y ago
    Ring doesn't seem to implement basic mitigations like warning users when there's been a login from a new device. "Ring does not alert users of attempted log-in from an unknown IP address, or tell users how many others are logged into an account at one time. Because of this, there is no obvious way to know whether any bad actors have logged into people’s compromised Ring accounts without their consent."
  • kerng 7y ago
    MFA?
    • JoBrad 7y ago
      They do have MFA, but only via SMS.