• Nougat@fedia.io
    link
    fedilink
    arrow-up
    1
    ·
    7 months ago

    That doesn’t have anything to do with it, really. There’s plenty of ways that credentials get “leaked,” not the least of which is users who reuse passwords also falling for scam emails that have them “log in” to something. It could matter if some specific credentials were initially acquired because some other place was storing clear text passwords, and that place had a breach.

    Still wouldn’t be an issue at all if users didn’t reuse passwords. That’s the lynchpin. This is users’ fault, not Roku’s.

    • Cocodapuf@lemmy.world
      link
      fedilink
      English
      arrow-up
      1
      ·
      7 months ago

      It could matter if some specific credentials were initially acquired because some other place was storing clear text passwords, and that place had a breach.

      Exactly, that was my assumption.

      After all, reusing passwords for multiple sites becomes a problem as soon the password becomes known. But for that password to become known, some site had to either allow the plaintext password to be leaked, or an unsalted hash. Or the site has to allow for insecure (easily guessable) passwords to be used.

      Reusing passwords is undeniably the user’s fault, but only because some other site’s security measures may also have been negligent.