Technology

59589 readers

3148 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each another!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago

MODERATORS

205

23andMe Blames Users for Recent Data Breach as It's Hit With Dozens of Lawsuits (www.wired.com)

submitted 10 months ago by L4s@lemmy.world to c/technology@lemmy.world

27 comments fedilink hide all child comments

23andMe Blames Users for Recent Data Breach as It's Hit With Dozens of Lawsuits::Plus: Russia hacks surveillance cameras as new details emerge of its attack on a Ukrainian telecom, a Google contractor pays for videos of kids to train AI, and more.

you are viewing a single comment's thread
view the rest of the comments

[–] SnotFlickerman@lemmy.blahaj.zone 41 points 10 months ago* (last edited 10 months ago) (25 children)

They're not wrong, this is because of users re-using passwords and an unrelated hacked database being used to brute-force access to 23andMe by checking to see if users re-used passwords. Shocker, they did.

I'll ask a question: What is a security system supposed to do when provided with the correct login credentials?

Hopefully it will inspire more companies to force 2FA, like 23andMe is doing now. That's honestly the biggest part that is their own fault, not forcing MFA from the get-go on their customer base.

[–] baggins@lemmy.ca 6 points 10 months ago

You can also monitor your system for known compromised credentials and expire them. Not foolproof but it catches the low hanging fruit.

load more comments (24 replies)