Jameson Lopp on nostr

Open in Damus

@Jameson Lopp 1755103086

Crazy terrible security practice I've noticed recently: people logging into accounts on hardware they don't own.

I rented a car and realized a previous renter had linked their Google account to it and I could see previous Maps trips and saved addresses.

I rented a house and realized a previous renter had logged into their streaming accounts on the TV and if I had wanted, could really screw with them.

163❤️24👀2💜2😱2🤙2❤️1

nostrich · 54w

Yeah me too... people tend to forget themselves

I also never log in to online services using Google, Facebook, or Apple. I always create a distinct account. Having said that, I can understand why so many people choose to do that given most people haven't heard of password managers.

Uh yes this is such a terrible practice. Normies are ignorant and many don't really care though.

Ludibrium · 54w

Milan Ljepoja · 54w

People forget that borrowed hardware isn’t borrowed trust 😅

People will log into their Facebook at Best Buy or a phone store. 🤦‍♂️🤦‍♂️🤦‍♂️

SuiGenerisJohn · 54w

Wait until we have NWC/Fountain/Zapstream ubiquitous on Roku, so much money is gonna get lost.

Partly agree, but what can you do with my Netflix account on tv? Delete my profile?) It’s true though, any airbnb I get, I don’t have to log in into my Netflix anymore. There is a 100% chance previous guests didn’t log out 🤣

Back in the day, what you played on spotify used to appear to all your friends on your facebook profile as "X is listening to Y". With that in mind, when people forgot to log out of spotify after a party, we used to put on albums called something like "orgasm sounds" or "penis enlargement meditati...

Leo Wandersleb · 54w

I don't get why companies that rent out PCs don't always reset these machines. I used miles and also saw lists of previous users but I'm glad those didn't set the system to Japanese.

These are the same people we are trying to teach Bitcoin self custody best practices to. Most of the people I encounter can’t even maintain security on their primary email account password if I want it bad enough.

And some call me paranoid because each time I restart my browser, everything is logged out, all cookies cleared. We are not the same person.