this post was submitted on 09 Dec 2023
302 points (89.1% liked)

Technology

59421 readers
5123 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS
 

DNA companies should receive the death penalty for getting hacked | TechCrunch::Personal data is the new gold. The recent 23andMe data breach is a stark reminder of a chilling reality -- our most intimate, personal information might

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 69 points 11 months ago* (last edited 11 months ago) (29 children)

Maybe you shouldn't use the same user+pass across dozens of different services then.

The data from 23 and Me was stolen using the legitimate login credentials of users acquired from an entirely different services data breach. Not via their own lax security policies.

You can't expect a corporation to protect you from yourself. And they certainly shouldn't be punished for your ineptitude.

Don't get me wrong, these corporations are not your friends, and shouldn't be trusted implicitly; but you have some responsibilities too.

/edit:

But when the chips are down and our data is leaked, they hide behind the old “we were not hacked; it was the users’ old passwords” excuse.

This logic is equivalent to a bank saying, “It’s not our fault your money got stolen; you should have had a better lock on your front door.” It’s unacceptable and a gross abdication of responsibility.

I completely disagree with this point. The service obviously has to provide you with access to your information/account. If you give out your login credentials for that access to a third party (another service), that third party loses your information, and it's then used to access stuff posing as you. That's your fault. You should not have shared (re-used) those same login credentials with others.

[–] [email protected] 23 points 11 months ago (2 children)

You nailed it. Users cannot be trusted to not re-use login credentials.

I know we all hate it, but proper 2-factor authentication via authenticator apps must be the default position for everything.

[–] [email protected] 1 points 11 months ago

Legit have had conversations with people where they position themselves as superior because they use "the same password" but with an @ instead of an a, or an extra 0 at the end.

Password Managers are really the best solution to using 1 password everywhere without actually putting yourself at risk. 1 password, to unlock the manager, that lets you copy/paste logins.

But nope 99% of all bullshit I experience in my friends and family is "but thats too complicated" or "thats too hard" when its 200% fucking not.

I'm calling them out. These are shit excuses for what their real issue is which is "i don't wanna change my habits" which is just childish and ignorant.

Even if its easier, even if its safer. If its different, then they don't want to even try it.

There are some people who will have "always used" a spoon to dig holes, and if you showed them a shovel, they'd complain that it's too hard or too complex, and go back to using the spoon.

load more comments (1 replies)
load more comments (27 replies)