Technology

59578 readers

6111 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each another!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago

MODERATORS

168

No more 12345: devices with weak passwords to be banned in UK (www.theguardian.com)

submitted 6 months ago by [email protected] to c/technology

43 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] thbb 11 points 6 months ago* (last edited 6 months ago) (2 children)

Usually, an impact study is made before such type of laws are made:

if this law is enacted, how much will it cost to the manufacturers to update their factory settings?
how will this be impacted on the device cost in the UK compared to other markets?
how many users will get stuck when losing the unique ID of the device, what are the recovery procedures, how costly is it to end users?
how many users will be protected by the measure and what cost for society does it represent?
how many users will set a dumb password anyhow and what is the cost for society?

I’d be curious to see the impact study, as many of those are actually botched.

[–] [email protected] 10 points 6 months ago (1 children)

Most routers already have non-standard passwords by default. At least in EU. I’m not sure which devices besides routers and IoT peripherals are affected by this bill.

[–] TheGrandNagus 1 points 6 months ago

All of them I've seen do use non-standard passwords for the web access portion, however it's been a mixed bag for the admin controls on the router OS itself. It's often just admin/admin.

Which is crazy. I could, if I were inclined, log into the router in someone's house/business if they haven't changed the admin password, but they have provided me with a password to access the web. Most people don't bother changing the admin password.

[–] [email protected] 8 points 6 months ago (1 children)

a user set weak password is infinitly more strong than a known default.

admin
admin

[–] [email protected] 1 points 6 months ago

That makes a strong password a million times infinite strong.