Electric vehicle chargers of the brand Hypercharger were shipped with an insecure default password and allowed access to a configuration interface to anyone over the Internet.

The vendor reacted quickly, but incidents like this show potential IT security risks of electrification infrastructure.

Similar security problems with publicly known default passwords are so common that they have been on the radar of regulators and lawmakers.

The US Federal Trade Commission (FTC) has put forward charges against vendors of such devices multiple times.

In California, Senate Bill 327 has required vendors of Internet-connected devices to prevent such issues since 2020. It is explicit that either each device comes with a unique password or users are required to change the password.

Oregon implemented similar regulation (HB 2395).
#pasword #security
https://industrydecarbonization.com/news/insecure-password-allowed-administrative-access-to-electric-vehicle-chargers.html

Just throwing this out there: For my free lancing I often need to share passwords or other secrets with clients. (Or they with me.)

I usually suggest Signal for that, but obviously most people don't have that.

Is there a a good (and not too pricey - I only do very few free lance projects, so only need it once every few months) password sharing option for this?

I tried 1Password shared vaults, but even that is just too complex for many of my clients.

Open to self hosted ideas, as I have a server I could install this on.

Ideally a very simple thing where both my clients can securely input passwords to share with me without having to create an account (secret link and OTP, or something like that) and I can share links with clients.

Any thoughts?

#SecretManager #Infosec #freelance #selfhost #passwords #pasword

Wow! Steam’s “forgot password” form doesn’t let you paste your new password in.

And as if that wasn’t bad enough, what error message do you get? “Password is invalid.” That’s it.

You literally have to paste your password manager generated password in, delete the last character, and type it in again for it to work.

Mind. Blown.

#steam #pasword #security #fail