UK 'Admin' and '12345' banned from being used as passwords in UK crackdown on cyber attacks - LMAO

Link | Archive

'Admin' and '12345' banned from being used as passwords in UK crackdown on cyber attacks​

From today, new laws in the UK aim to make it tougher for cyber attacks to succeed and increase consumer confidence in the security of the products they use and buy.

IMG_3983.jpeg
Common and easily guessed passwords like "admin" or "12345" are being banned in the UK as part of world-first laws to protect against cyber attacks.

As well as default passwords, if a user suggests a common password they will be prompted to change it on creation of a new account.

It comes as a home filled with smart devices could be exposed to more than 12,000 hacking attacks from across the world in a single week, with 2,684 attempts to guess weak passwords on five devices, according to an investigation by Which?

Password managing website NordPass found the most commonly used passwords in the UK last year were 123456 and, believe it or not, password.

The new measures come into force in the UK on Monday, making it the first country in the world to introduce the laws.

They are part of the Product Security and Telecommunications Infrastructure (PSTI) regime - designed to improve the UK's resilience from cyber attacks and ensure malign interference does not impact the wider UK and global economy.

Under the law, manufacturers of all internet-connected devices - from mobile phones, smart doorbells and even high-tech fridges - will be required to implement minimum security standards.

They will also have to publish contact details so bugs and issues can be reported and resolved and tell consumers the minimum time they can expect to receive important security updates.

UK'S 10 MOST COMMONLY USED PASSWORDS IN 2023​

  • 123456
  • password
  • qwerty
  • liverpool
  • 123456789
  • arsenal
  • 12345678
  • 12345
  • abc123
  • chelsea
"As everyday life becomes increasingly dependent on connected devices, the threats generated by the internet multiply and become even greater," science and technology minister Viscount Camrose said.

"From today, consumers will have greater peace of mind that their smart devices are protected from cyber criminals... We are committed to making the UK the safest place in the world to be online and these new regulations mark a significant leap towards a more secure digital world."

According to recent figures, 99% of UK adults own at least one smart device and UK households own an average of nine connected devices.
 
How will this make it tougher for actual 'cyber criminals' to succeed when the majority of hacks are just credential stuffing from previously leaked databases?
A password like h9DDGj8*23@8dXXla_3!5fkKk9Dj330FFKNIG is just as secure as 12345 if you use the same password everywhere like a British person would.
 
Passwords are getting ridiculous though. They keep lengthening the required characters, demanding more numbers and characters, denying you passwords for arbitrary reasons ("Sorrry this does not meet the requirements but we won't tell you why!"). And more and more are now two factor.

I understand security, but no human can remember 16 individual passwords with 8-12 characters, a number, capitals, lowercase, and a special character and on top of it be expected to have them all be different and change them every 90 days. It basically forces you to write them down on a piece of paper, which is hardly secure, or demands you use some sort of password service. I had it out with my IT dept at work the other day because we have 5 separate passwords and I could just no longer remember all the iterations I'd used and needed everything reset.

I have one hotel points app where every single time I log on it's two factor but only email is an option. Just to look at my points or book a room I have to click the app, put in a password, open my email app, and click a link. It's really annoying.

And try to explain that to an IT person who lives this and thinks it's great and normal.
 
Passwords are getting ridiculous though. They keep lengthening the required characters, demanding more numbers and characters, denying you passwords for arbitrary reasons ("Sorrry this does not meet the requirements but we won't tell you why!"). And more and more are now two factor.

I understand security, but no human can remember 16 individual passwords with 8-12 characters, a number, capitals, lowercase, and a special character and on top of it be expected to have them all be different and change them every 90 days. It basically forces you to write them down on a piece of paper, which is hardly secure, or demands you use some sort of password service. I had it out with my IT dept at work the other day because we have 5 separate passwords and I could just no longer remember all the iterations I'd used and needed everything reset.

I have one hotel points app where every single time I log on it's two factor but only email is an option. Just to look at my points or book a room I have to click the app, put in a password, open my email app, and click a link. It's really annoying.

And try to explain that to an IT person who lives this and thinks it's great and normal.
Sir please don't call me out like that...
 
Passwords are getting ridiculous though. They keep lengthening the required characters, demanding more numbers and characters, denying you passwords for arbitrary reasons ("Sorrry this does not meet the requirements but we won't tell you why!"). And more and more are now two factor.

I understand security, but no human can remember 16 individual passwords with 8-12 characters, a number, capitals, lowercase, and a special character and on top of it be expected to have them all be different and change them every 90 days. It basically forces you to write them down on a piece of paper, which is hardly secure, or demands you use some sort of password service. I had it out with my IT dept at work the other day because we have 5 separate passwords and I could just no longer remember all the iterations I'd used and needed everything reset.

I have one hotel points app where every single time I log on it's two factor but only email is an option. Just to look at my points or book a room I have to click the app, put in a password, open my email app, and click a link. It's really annoying.

And try to explain that to an IT person who lives this and thinks it's great and normal.
If I were conspiracy minded, which I'm usually not, I would make one up about how passwords becoming more common, required and onerous are a plot by the government to soften us up for a government sanctioned online ID system. Because even if there is no conspiracy pushing us that way on purpose, it's happening naturally.
 
Passwords are getting ridiculous though. They keep lengthening the required characters, demanding more numbers and characters, denying you passwords for arbitrary reasons ("Sorrry this does not meet the requirements but we won't tell you why!"). And more and more are now two factor.

I understand security, but no human can remember 16 individual passwords with 8-12 characters, a number, capitals, lowercase, and a special character and on top of it be expected to have them all be different and change them every 90 days. It basically forces you to write them down on a piece of paper, which is hardly secure, or demands you use some sort of password service. I had it out with my IT dept at work the other day because we have 5 separate passwords and I could just no longer remember all the iterations I'd used and needed everything reset.

I have one hotel points app where every single time I log on it's two factor but only email is an option. Just to look at my points or book a room I have to click the app, put in a password, open my email app, and click a link. It's really annoying.

And try to explain that to an IT person who lives this and thinks it's great and normal.
Just use a password manager. There are many local ones that don't require to use a third party """service""".
 
Back