Why Nostr? What is Njump?
2024-05-15 13:21:15

beautyon on Nostr: INGSOCs fatal conceit is the belief that legislation solves problems. It doesn't all ...

INGSOCs fatal conceit is the belief that legislation solves problems. It doesn't all this nonsense means is that manufacturers will leave INGSOC and CALISOC so they can produce their goods in free countries.

It doesn't matter if it is bad practice that bad passwords are shipped with goods; what matters is the principle of the State telling people how they should run their companies, down to the technical details of password strength.

Anyone who calls themselvs a "Bitcoiner" cannot be for this. If they are, they are painfully naïeve, believing that these same computer illiterate geriatrics are not coming to Bitcoin to demand that the 21,000,000 limit be increased, "For the good of Society".

There are not enough hours in the day, days in the year, or years to keep teaching these fundamental principles over and over to stupid, naïeve, ignorant dullards. This is why Bitcoin needed to be written, so that the law is laid down once and forevermore in a way that cannot be undone.

Once the money supply is constrained, the State will not be able to force you to set passwords.

YES, that is the true purpose of Bitcoin, Droogie!

--------------------------------------------------
↓ FROM BRUCE SCHNEIER, BITCOIN DENIER ↓
----------------------------------------------------

The UK Bans Default Passwords

The UK is the first country to ban default passwords on IoT devices.

On Monday, the United Kingdom became the first country in the world to ban default guessable usernames and passwords from these IoT devices.

https://therecord.media/united-kingdom-bans-defalt-passwords-iot-devices

Unique passwords installed by default are still permitted.

The Product Security and Telecommunications Infrastructure Act 2022 (PSTI)

https://archive.is/wip/vIYbQ

introduces new minimum-security standards for manufacturers, and demands that these companies are open with consumers about how long their products will receive security updates for.

The UK may be the first country, but as far as I know, California is the first jurisdiction. It banned default passwords in 2018, the law taking effect in 2020.

https://techcrunch.com/2018/10/05/california-passes-law-that-bans-default-passwords-in-connected-devices/?guccounter=1

This sort of thing benefits all of us everywhere. IoT manufacturers aren’t making two devices, one for California and one for the rest of the US. And they’re not going to make one for the UK and another for the rest of Europe, either. They’ll remove the default passwords and sell those devices everywhere.

Another news article.

EDITED TO ADD (5/14): To clarify, the regulations say that passwords must be either chosen by the user, or else unique to the device. If unique preset passwords are used, they can’t be produced by an algorithm that makes them easily guessable. Here is the actual language of the regulation.

https://archive.is/UtSRe
Author Public Key
npub1ccsfkkfk46jsjtn80cup0vjn98slkheqd65t36tut822kddvdcxqxjdc57