Tulsi Gabbard, now the US director of national intelligence, used the same easily cracked password for different online accounts including a personal Gmail account and Dropbox over a period of years, leaked records reviewed by WIRED reveal.
  • klu9@lemmy.caEnglish
    32·
    1 个月前

    Plausible deniability for when it’s discovered her accounts are controlled from Moscow?

    “Oh, I must have been hacked cuz weak passwords. That’s why my account sent our classified war plans to Putin.”

  • milkisklim@lemm.ee
    16·
    1 个月前

    That’s weird. I have my browsers set up so if I type my password all that shows up is *******

  • brisk@aussie.zone
    16·
    1 个月前

    Material from breaches shows that during a portion of this period, she used the same password across multiple email addresses and online accounts, in contravention of well-established best practices for online security. (There is no indication that she used the password on government accounts.)

    This is… not interesting

    • CmdrShepard42@lemm.ee
      14·
      1 个月前

      It should be interesting considering she’s currently the director of national intelligence yet seemed to learn about security during the time of AOL floppy disks.

    • Midnitte@beehaw.orgEnglish
      13·
      1 个月前

      Until it turns out she was using the personal accounts for governmental business…

      • bamboo@lemmy.blahaj.zoneEnglish
        7·
        1 个月前

        Perhaps, but like actual hygiene, not having good digital hygiene stays with you between personal and work personas. It is troubling considering she is the Director of National Intelligence and it’s something which should be a baseline requirement for the position. Regardless of party affiliation, it’s competence we should demand for those in these positions.

    • Maeve@kbin.earth
      3·
      1 个月前

      If people only knew how many anti/sec professionals do this, this would be in a zone with ASCII art, not Wired, but frankly, after what Poulson and Lamo did to Chelsea Manning, I really don’t expect better from the media specifically marketed to those with an interest in anything tech related. I did before that happened, but after the absolute apathy from the public sector, if not outright hostility toward Ms. Manning, I expected and do expect the absolute worst, for the sake of sweet, profitable clicks. What I continue to be surprised about is how utterly bottomless this particular hole is. Really a black hole more than a mere abyss.

  • some_guy@lemmy.sdf.org
    8·
    1 个月前

    Meh, I can’t dunk on this one. Despite paying for a password manager, I still use the same password for things I don’t care about / that can’t be used to exploit me. The other day I had to register for something stupid and that’s what I used, yet again. Granted, I’m not logging into game-changing accounts with it, but I get it. I’ll dunk on her for policy.

    • joby@programming.dev
      24·
      1 个月前

      This reads as sarcastic to me, but I and many others legitimately do, through the use of a password manager. I have an encrypted database that syncs between my phone, laptop, and a vps, and I occasionally manually back up to a free email account. I only need to remember the one password to unlock the db.

    • hash@slrpnk.net
      English
      3·
      1 个月前

      The standard user cannot comprehend that Bitwarden is less than $1 a month and totally worth every cent.

        • NeatNit@discuss.tchncs.de
          3·
          1 个月前

          Having used KeePass for a few years, syncing via a self-hosted SFTP server, I can’t recommend it for most people.

          • It’s too technical, especially if you want sync, but even if you don’t
          • Apps on different platforms don’t quite agree with each other in all ways, making syncing a bit annoying (particularly: how to associate a login with multiple URLs)
          • It can be hard to pick which app to use on each platform, other than Windows, because there’s no official/canonical best option (Mono has lots of drawbacks)

          I’ve switched to Bitwarden and I’m sticking with it.