290
Researcher uncovers one of the biggest password dumps in recent history
(arstechnica.com)
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 18 Jan 2024
290 points (100.0% liked)
Technology
60012 readers
1702 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each another!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
Approved Bots
founded 2 years ago
MODERATORS
Ya know, I have no issues with 2fa, but I watch older folks struggle with it for some reason. They can't fathom the 'magic'. But I don't understand 2fa on utility websites that are only payment portals that obfuscate account numbers. Like "enable 2fa for account security!" why? Because someone who has found my credentials on the dark web might pay my bill?
They can use the information to try to send you fake invoices to try to scam you, or use your personal information to social engineer you or your relatives, attempt identity theft etc. Basic info-sec is still important. It's like leaving the bathroom door open when you poop. It probably isn't going to hurt you if you leave it open but its still probably a good idea to shut the door if its a public restroom
Alright, that makes some sense. Fair enough.
I'm also trying to find the angle on it. Like with my ISP I guess someone could have my password but not necessarily my address? So from the ISP site they could peek at my address??? I'm not even sure it has my address unobfuscated but I figure it must somewhere, like "view this bill".
A lot of ISPs provide email, too. So getting an ISP password lets them reset your other passwords which used that email address for the "forgot password" prompt. (I'm guessing you don't use your ISP provided email, but you're not "most people".)