They’re blaming customers for not having good cybersecurity practices instead of themselves for not having good cybersecurity practices.

    • doppelgangmember@lemmy.world
      link
      fedilink
      arrow-up
      17
      ·
      1 year ago

      Uhh yeah you can…

      Mandatory 2FA with phone and password retry count. If it’s targeted using breach data of email/passwords then the 2FA should still stop the majority…

      • brbposting
        link
        fedilink
        arrow-up
        2
        ·
        1 year ago

        Shouldn’t service providers be hashing the plaintext passwords that show up in dark web leaks to see if matching users reused those passwords?

        • folkrav@lemmy.ca
          link
          fedilink
          arrow-up
          4
          ·
          1 year ago

          Wouldn’t really be of any use if they’re doing things right and salt their hashes

        • sugar_in_your_tea
          link
          fedilink
          arrow-up
          3
          ·
          1 year ago

          They typically do, but that doesn’t stop hackers from posting the plaintext.

          The real solution is to never store plaintext and to use MFA.