Comment on Plex got hacked.

• phoenixz@lemmy.ca ⁨2⁩ ⁨weeks⁩ ago

  I’m sure it does, but had they done their security right it likely wouldn’t have happened.

  Yeah, 100% secure doesn’t exist but at the same time it’s always closed source companies like these that turn out to have horrible software security. Can’t say for sure of course, but at this point it’s a safe bet

  source
• Smoogs@lemmy.world ⁨2⁩ ⁨weeks⁩ ago

  Yes and no. hacking isn’t new. Everyone could get sued technically for security breaches for not taking enough interest in their own security.

  But then it’s ridiculous if you could sue your own grandma cuz you once used her computer to print your resume and because she uses default passwords now someone has all your info you had from anything you left behind.

  Ransom and hacking is pretty common unfortunately in the industry. And it is in part on the user to also take practices to protect themselves if they haven’t enabled 2F yet. And there’s way more you can do where you make email masks now and simply do not fill in with your accurate information like don’t use your real name.and use a VPN. Store stuff on ext drives and less on clouds that don’t use e2e encryption

  I don’t know if it’s perfect but as a user just always have it back in your mind that your information can be obtained(if you ever used a web service to check your info on the dark web, this is pretty much going to be a given) . And it probably has. So maybe at least you can try to control what gets obtained.

  source

  • AA5B@lemmy.world ⁨2⁩ ⁨weeks⁩ ago

    In some ways 2fa is a weak spot even disregarding recovery processes being open to social engineering, now you’re giving a verified identifier uniquely tied to you

    I generate unique email addresses and passwords for every account but can’t realistically do that with phone numbers

    2fa by sms or voice isn’t especially secure anyway since you’re open to sim attacks and social engineering. I have a lot more hope for Passkeys but don’t really trust the practical advice arts of managing them yet

    source

    • Smoogs@lemmy.world ⁨2⁩ ⁨weeks⁩ ago

      …second phone number…

      Anyways… we are digressing here,

      at this point it’s a lot like protecting anything in life: prevention and making yourself less tasty to a psycho.

      If you’ve set it even two step You’re already doing way more than any user they are probably intending this warning to do more to protect themselves who set their password to “password” or phrases haven’t changed it in decades and would even prefer to publicly post their passwords on social willing to give up their entire savings rather than having to do anything further as if technology is too beyond and suddenly so super complex that they have to use different keys on their keyboard other than letters.

      You don’t have apply every threat like it’s calculus in a situation where there are people who are scared of even doing basic sums.

      This situation was hashtags. Literally. And all they are asking is to rehash it. And here you are already disposing of the 2nd feature after that.

      source

      • AA5B@lemmy.world ⁨2⁩ ⁨weeks⁩ ago

        …second phone number…

        Of course but it doesn’t scale. I’m currently up to 182 unique generated email addresses to help keep my online accounts a little more secure. But they all go through one or two phone numbers, leaving me more open to sim attacks, social engineering and data aggregation

        source
• postmateDumbass@lemmy.world ⁨2⁩ ⁨weeks⁩ ago

  Depends on how good the lawyers were that wrote the thing you said you read when signing up.

  source