No more 12345: devices with weak passwords to be banned in UK (www.theguardian.com)
from hellfire103@lemmy.ca to cybersecurity@sh.itjust.works on 29 Apr 07:20
https://lemmy.ca/post/20250124

cross-posted from: feddit.uk/post/11130497

Tech that comes with weak passwords such as “admin” or “12345” will be banned in the UK under new laws dictating that all smart devices must meet minimum security standards.

Measures to protect consumers from hacking and cyber-attacks come into effect on Monday, the Department for Science, Innovation and Technology said.

It means manufacturers of phones, TVs and smart doorbells, among others, are now legally required to protect internet-connected devices against access by cybercriminals, with users prompted to change any common passwords.

Brands have to publish contact details so that bugs and issues can be reported, and must be transparent about timings of security updates.

It is hoped the new measures will help give customers confidence in buying and using products at a time when consumers and businesses have come under attack from hackers at a soaring rate.

#cybersecurity

threaded - newest

autotldr@lemmings.world on 29 Apr 07:25 next collapse

This is the best summary I could come up with:


Tech that comes with weak passwords such as “admin” or “12345” will be banned in the UK under new laws dictating that all smart devices must meet minimum security standards.

It means manufacturers of phones, TVs and smart doorbells, among others, are now legally required to protect internet-connected devices against access by cybercriminals, with users prompted to change any common passwords.

Rocio Concha, a director of policy and advocacy at Which?, said: “The OPSS [Office for Product Safety and Standards] must provide industry with clear guidance and be prepared to take strong enforcement action against manufacturers if they flout the law, but we also expect smart device brands to do right by their customers from day one and ensure shoppers can easily find information on how long their devices will be supported and make informed purchases.”

The science and technology minister, Jonathan Berry, said: “As everyday life becomes increasingly dependent on connected devices, the threats generated by the internet multiply and become even greater.

“From today, consumers will have greater peace of mind that their smart devices are protected from cybercriminals, as we introduce world-first laws that will make sure their personal privacy, data and finances are safe.

The laws are taking effect as part of the product security and telecommunications infrastructure (PSTI) regime, which aims to strengthen the UK’s resilience against cybercrime.


The original article contains 350 words, the summary contains 223 words. Saved 36%. I’m a bot and I’m open source!

crispyflagstones@sh.itjust.works on 29 Apr 14:46 collapse

It’s utterly disturbing how easy it is to get into so many networks and devices just by looking up their default password or plugging in the default password on the side of the box. Absolutely the first thing you need to change on a new device if it comes with a preset PW.