News for hackers. Stuff that matters.
Re:On Cybersecurity and Being Targeted by technomancy on Wednesday August 10, 2016 @05:59AM (#12260550)
> It is not enough to use some strong passwords for the things you think are sensitive. Every weak password is a weak link in your total identity chain.

I get what you're saying here, but this is patently false. My HN account is not a weak link in my "total identity chain" in any way that matters.

Yes, obviously defaulting to strong passwords everywhere is a better default because you can make mistakes when judging how important a specific site is, but that doesn't mean that every site is critical.

Re:On Cybersecurity and Being Targeted by ethbro on Wednesday August 10, 2016 @07:28AM (#12260840)
I believe parent's thinking is that a total identity chain comprises all human-influencing bits of identity. Most of these social engineering attacks fuzz boundaries in human-arbitrated authentication systems. And I wouldn't categorically rule out any portion of my identity as never being useful to an attacker.
Re:On Cybersecurity and Being Targeted by dsacco on Wednesday August 10, 2016 @10:09AM (#12261837)
You're right that not every website is critically important, but that also wasn't my point. My real point is that it is important to treat every website as though it were, because having that decision making ability is dangerous.

I think we mostly agree here though :).

Re:On Cybersecurity and Being Targeted by mbrock on Wednesday August 10, 2016 @09:14AM (#12261395)
Yet with access to your HN account, a malicious person could damage your reputation and career, and I can imagine different kinds of social engineering that makes "weak link" seem plausible.