3 ms·
To be fair, 23andme wasn't hacked, at least not with the traditional definition. Their users who were reusing passwords got hacked. That said… Should they have
by jonny_eh 3y ago
To be fair, 23andme wasn't hacked, at least not with the traditional definition. Their users who were reusing passwords got hacked.
That said… Should they have required 2FA? Yes. Should they have taken proactive action on behalf of their users when they appeared in "Have I Been Pwned"? Yes.
- amanaplanacanal 3y agoTons of online services don’t require 2FA. It may be best practice but it seems to be far from standard practice.
- jonny_eh 3y agoExactly, but everyone's raking them over the coals in this thread. Could they have done better? Yes. Did they "get hacked"? No.