this post was submitted on 23 Aug 2023
541 points (99.3% liked)

Technology

59588 readers
2914 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS
 

The scraped data of 2.6 million DuoLingo users was leaked on a hacking forum, allowing threat actors to conduct targeted phishing attacks using the exposed information.

you are viewing a single comment's thread
view the rest of the comments
[–] hatter@lemmy.world 29 points 1 year ago (1 children)

Just use a password manager and a unique, long, random generated password for every site. There's no need or reason to know the password to anything other than your password manager and your primary email.

[–] deft@ttrpg.network 9 points 1 year ago (1 children)

in like a decade the use of a password manager will be a bad idea. i don't know how but it will be.

[–] demlet@lemmy.world 14 points 1 year ago (2 children)

Hmm, a single point of access for every password you have? I don't see the problem...

[–] SleveMcDichael@programming.dev 21 points 1 year ago* (last edited 1 year ago) (1 children)

The thing is the average person either can't or can't be bothered to remember even a dozen actually secure passwords, so they fall back to a couple of simple derivations of a common password, meaning each and every site a user signs up on represents an additional single point of failure.

[–] demlet@lemmy.world 2 points 1 year ago

That's a good point.

[–] Chriskmee@lemm.ee 10 points 1 year ago

Lucky until we get actual quantum computing, it's not worth the years on a supercomputer to crack a single stolen set of encrypted passwords.