From the notebook
4 notes on this topic.
Driver's license numbers are not passwords. They are permanent identifiers tied to voting rolls, benefits systems, and background checks. The National Public Data breach exposed 272 million of them.
A fintech with 50 million users fell for spoofed government data requests. The weak link was not the encryption.
LastPass notified users of another breach. This is the third major incident since 2022. At what point do we stop calling it a password manager and start calling it a credentials museum.
Third-party integrations are the soft underbelly of university IT. Oxford just learned that again.