A few weeks ago there were a flurry of reports of Ring cameras being hacked. Panic ensued. Tech talking heads immediately piled on Ring and other similar service providers as evil, unsecure, and heartless capitalists who could care less about their customers. They said that children were in peril, privacy was over, and small flightless birds were soon to rise up and become our overlords. It was classic fake news... except for the birds, of course.
The truth of the matter is it was the customers who failed to configure their devices with secure passwords on a secure infrastructure. Hackers look for soft targets. Having no password or not changing the default password (the one that came with the device) is like putting a bird feeder on the ground and not expecting squirrels to plunder the seed. It's not the device's fault. It's not the fault of the company that built the device. It is totally the fault of the end-user (consumer) who chose not to take their security seriously.
Passwords are a pain. They are hard to remember. They cause confusion and lost productivity. Well, until a better system is developed, we are stuck with them, so it's best to learn how to co-exist and maybe even love your passwords. (Okay, maybe not.)
Here are the rules for good passwords:
- At least 10 characters. 12 is better. 14 or more is awesome.
- Use a mix of numbers, letters (capitals, too), and symbols if allowed.
- Don't use the same password for everything. It's like having no password at all.
- Do not make the passwords similar to others. Once one is compromised, the rest will fall quickly.
- Write down your passwords, or save them somewhere. No one remembers their passwords.
- It is okay to use fowl language when talking about the subject of passwords with others.
If you use iCloud Keychain and save passwords in Safari, you can "audit" the state of your passwords by going into Safari, choosing Preferences from the Safari drop-down menu, and selecting the Passwords menu tab. It will ask you for your computer password. Here you can see what you have saved. Accounts with passwords that are reused or easily guessed will show a symbol on the right. Happy auditing!