3 ms·

Yes. It would be the same as resetting your email password and needing to login again on your devices. If a password is so precious that you share it plaintext

Yes. It would be the same as resetting your email password and needing to login again on your devices. If a password is so precious that you share it plaintext with third parties it is a bad usecase for a password.

arsome 2y ago
The level of effort and obviousness of an email reset is nothing compared to helping someone figure out how to reconfigure every smart device ever made.
- SahAssar 2y ago
  So it's a bad usecase for a password, then. Perhaps every router should ship with a preconfigured VLAN for shitty smart home stuff that is a lot more open, or maybe we should stop trying to stick internet into everything ever created.
  - shawnz 2y ago
    Why should it be just the IoT devices that get the insecure network? Why not just stop trusting the LAN altogether and instead use technologies like HTTPS and DoH to ensure privacy on the important devices? That seems to be the way the tide is turning anyway.
    - SahAssar 2y ago
      Personally I'm all for that but people & packages seem to be pretty promiscuous about listen address defaults and assuming everything behind a routers NAT is trusted. Treating the network as untrusted is good but as long as some people are paying for service, traffic and bandwidth there are reasons to not allow anything to use your network. And there is also a legal question of liability if someone is not quite above board from your IP.
    - deleted 2y ago
      [deleted]
RedShift1 2y ago
Tell me you've never done help desk work without telling me you've never done help desk work.
- SahAssar 2y ago
  I've actually worked help desk for about 3 years. I've had calls lasting over an hour helping customers configure their email on their phone and computer. I learned not to laugh when people called "the internet" either "that e-thingy", "mozarella foxfire" or "googlé charome". I dealt with explaining to people why IE6 did not understand SNI when we decided to give all our customers websites HTTPS. Just saying that I've been in that and seen that.

arsome 2y ago

The level of effort and obviousness of an email reset is nothing compared to helping someone figure out how to reconfigure every smart device ever made.

SahAssar 2y ago
So it's a bad usecase for a password, then. Perhaps every router should ship with a preconfigured VLAN for shitty smart home stuff that is a lot more open, or maybe we should stop trying to stick internet into everything ever created.
- shawnz 2y ago
  Why should it be just the IoT devices that get the insecure network? Why not just stop trusting the LAN altogether and instead use technologies like HTTPS and DoH to ensure privacy on the important devices? That seems to be the way the tide is turning anyway.
  - SahAssar 2y ago
    Personally I'm all for that but people & packages seem to be pretty promiscuous about listen address defaults and assuming everything behind a routers NAT is trusted. Treating the network as untrusted is good but as long as some people are paying for service, traffic and bandwidth there are reasons to not allow anything to use your network. And there is also a legal question of liability if someone is not quite above board from your IP.
  - deleted 2y ago
    [deleted]

RedShift1 2y ago

Tell me you've never done help desk work without telling me you've never done help desk work.

SahAssar 2y ago
I've actually worked help desk for about 3 years. I've had calls lasting over an hour helping customers configure their email on their phone and computer. I learned not to laugh when people called "the internet" either "that e-thingy", "mozarella foxfire" or "googlé charome". I dealt with explaining to people why IE6 did not understand SNI when we decided to give all our customers websites HTTPS. Just saying that I've been in that and seen that.