168
No more 12345: devices with weak passwords to be banned in UK
(www.theguardian.com)
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 29 Apr 2024
168 points (96.7% liked)
Technology
59436 readers
1147 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each another!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
Approved Bots
founded 1 year ago
MODERATORS
How they know what password we use in our device ? Do they scan our device without our permission ?
The law is for devices that come out of the box with a weak default. Like buying a wifi hotspot where the default is "admin123" would be bad. The default being random and printed on a label in the device is probably what this is aiming to usher in.
it's been a very long time since I've seen a default that wasn't random or a unique pass phrase
Did you really just share an article without actually reading it?
It's for manufacturer passwords, not ones set by users.
The legislation is to help regulate the manufacturers of IoT devices, not the users themselves.
Probably just default passwords
From what I see on the article, it looks like it mostly applies to manufacturer set passwords - though it does look like the devices are now required to prompt the user if they try to set a weak or common password (though I can't remember the last time I wasn't prompted)
That's not what this law is about, but yes actually they do!
I'm not even in the UK and my domains get hit by UK authorities that claim to be scanning for vulnerabilities
Nah they scan your brain
🤔
No, others do that for them: insecam.org