5 ms·
Millions of users reuse passwords. This is nuts. Who are these people?
by trallnag 3y ago
Millions of users reuse passwords. This is nuts. Who are these people?
- bogota 3y agoMore importantly how was one person able to log in and download all that data without any alarms going off
- rsaxvc 3y agoThis. Every one of these attacks I've worked were loud due to the volume of logins and ratio of failures.
- sieste 3y agomaybe they all share the same password-reuse gene?
- challenger-derp 3y agothis made me spit out my morning coffee. ugh.
- wepple 3y agoMost of the world. People that don’t use HN or work in tech.
- Wissenschafter 3y agoI am a data engineer at a fortune 50 company, I do. It's infuriating that I'm expected to have a unique alphanumeric key to every single thing I use on a computer. That would be 100's of keys. It's nuts people think we should have unique passwords for everything.
- notpushkin 3y agoHave you already been introduced to such concept as password managers?
- Wissenschafter 3y agoYeah, let me just put ALL of my passwords in ONE location. Like that is any better than reusing a password. Then you are relying on that password manager, what if you lose access to it or the data with your keys? Welp...
- poorlyknit 3y ago> Yeah, let me just put ALL of my passwords in ONE location. By reusing a password, you're basically doing this already.
- wepple 3y agoEven worse, you’re putting ALL of your “passwords” in 100 different places!
- wepple 3y ago> what if you lose access to it We’ve been working very hard on this problem, and recently devised a scheme known as backups. It’s like a whole copy of your data someplace elsewhere! Snark aside; popular password managers have extensive recovery and replication capabilities.
- notpushkin 3y ago> any better than reusing a password It is. That way you only trust your password manager and not every single app you use (that can easily dump your password when you login, or might even store it as plaintext). If a password manager is open source and you know how to audit it, you could do that. Otherwise you can ask somebody you trust who knows better. > what if you lose access to it or the data with your keys That is a possibility indeed. You should make backups, of course.
- leobg 3y agoLike LastPass, for instance. /s
- wastewastewaste 3y ago