[新闻] 英国立法封杀强度过低的默认&通用密码

楼主: STAV72 (刁民党党务主委)   2024-04-30 19:56:59
备注请放最后面 违者新闻文章删除
1.媒体来源:
外媒 techtimes.com
2.记者署名:
Aldohn Domingo
3.完整新闻标题:
World's First: UK to Officially Ban Weak Passwords
世界首创:英国封杀弱鸡密码
No more common passwords.
不再存在通用密码
4.完整新闻内文:
World's First: UK to Officially Ban Weak Passwords
No more common passwords.
Aldohn Domingo, Tech Times 28 April 2024, 10:04 pm
The United Kingdom is reportedly set to crack down on common and weak
passwords, requiring manufacturers of internet-connected devices to direct
users to change commonly used security keys.
The new legislation is also set to make security and update reports clearer.
全球首个:英国正式禁止弱密码
不再有通用密码。
科技时报 奥尔多恩·多明戈2024 年 4 月 28 日,晚上 10:04
据报道,英国将打击 常用密码和弱密码,要求网络连接设备制造商指导用户更改常用的
安全密钥。
新立法还旨在使安全和更新报告更加清晰。
The PSTI regime, or Product Security and Telecommunications Infrastructure,
plans to impose minimal requirements that must be met to avoid penalties.
According to the government, the regulations are a "world first" that will
guard UK businesses and consumers against cybercrime and increase security.
PSTI 制度(即产品安全和电信基础设施)计画实施必须满足的最低要求,以避免处罚。
据政府称,这些法规是“世界首创”,将保护英国企业和消费者免受网络犯罪并提高安全
性。
As a result, producers of various electronics, including phones, TVs, and
smart doorbells, are now obligated, by law, to safeguard internet-connected
gadgets from hackers and remind consumers to update any default passwords.
Cyber Security Concerns In The Global Wake of Hacking Threat
因此,根据法律,包括手机、电视和智慧门铃在内的各种电子产品的生产商现在有义务保
护连网设备免受骇客攻击,并提醒消费者更新任何默认密码。
全球骇客威胁引发的网络安全担忧
Brands must provide contact details and maintain transparency regarding the
timing of security upgrades to facilitate bug and concern reporting.
品牌必须提供联络方式并保持安全升级时间的透明度,以方便报告错误和问题。
At a time when hackers are attacking consumers and businesses more frequently
than ever, the new safeguards are anticipated to increase people's confidence
in purchasing and using technology.
According to the Department for Science, Innovation, and Technology (DSIT),
more than half of UK households reportedly have a voice assistant, such as
Alexa.
在骇客比以往任何时候都更频繁地攻击消费者和企业之际,新的保护措施预计将增强人们
购买和使用科技的信心。
据科学、创新和技术部 (DSIT) 称,据报道,超过一半的英国家庭拥有 Alexa 等语音助
理。
According to reports, home networks typically included nine devices.
These can include web-enabled toys or remotely controlled equipment such as
stoves, refrigerators, radiators, and standard broadband routers.
Since their widespread use, an increasing number of hackers have gained
control of these devices and abused them—sometimes secretly photographing or
recording, spying on individuals, or stealing personal information.
据报道,家庭网络通常包括九个设备。
这些可以包括连网玩具或远端控制设备,例如炉灶、冰箱、散热器和标准宽带路由器。
自从它们广泛使用以来,越来越多的骇客控制了这些设备并滥用它们—有时秘密拍照或
录音、监视个人或窃取个人资讯。
Experts Weigh In
According to security expert Ken Munro of Pen Test Partners, a company that
conducts ethical hacking against smart gadgets, the new regulation is a
positive move.
He also said it has historically been far too simple for manufacturers to
discontinue support for older models when they introduced new ones, and it
would be helpful for buyers to compare the number of years of support that a
product was guaranteed to provide.
专家参与
针对智慧型装置进行道德骇客攻击的 Pen Test Partners 公司的安全专家 Ken Munro 表
示,新规定是一项积极举措。
他还表示,从历史上看,制造商在推出新型号时停止对旧型号的支援太简单了,买家比较
产品保证提供的支援年限将很有帮助。
According to him, a manufacturer prioritizing cyber-security could be
indicated by a more extended support period.
Jonathan Berry, the minister of science and technology, said the risks posed
by the internet grow as our daily lives depend more and more on linked
gadgets.
据他介绍,制造商优先考虑网络安全可能会透过更长的支援期来体现。
科技部长乔纳森·贝里 (Jonathan Berry) 表示,随着我们的日常生活越来越依赖连网设
备,网络带来的风险也在增加。
UK on Cyberattacks
The United Kingdom's Government Communications Headquarters issued a warning
about cyberattacks and artificial intelligence in January, stating that as
these technologies advance, cyberattacks are likely to increase in frequency.
This makes the new cybersecurity-focused legislation timely.
英国应对网络攻击
英国政府通讯总部在一月份发布了有关网络攻击和人工智能的警告,指出随着这些技术的
进步,网络攻击的频率可能会增加。
这使得新的以网络安全为重点的立法非常及时。
In the next two years, AI may make it simpler for inexperienced hackers to
wreak havoc online, according to a recent warning about ransomware attacks
and phishing scams that potentially affect the entire world.
The article asserts, in particular, that threat actors' social engineering
skills will be enhanced by artificial intelligence.
根据最近关于可能影响整个世界的勒索软件攻击和网络钓鱼诈骗的警告,未来两年,人工
智慧可能会让缺乏经验的骇客更容易在网络上造成严重破坏。
文章特别断言,威胁行为者的社会工程技能将透过人工智能得到增强。
Genetic artificial intelligence (GenAI) can enable convincing contact with
victims, including creating lure documents without requiring translation,
spelling, or grammar checks, often signs of phishing.
基因人工智能 (GenAI) 可以与受害者建立令人信服的联系,包括建立诱饵文档,而无需
翻译、拼字或语法检查(通常是网络钓鱼的迹象)。
5.完整新闻连结 (或短网址)不可用YAHOO、LINE、MSN等转载媒体:
https://reurl.cc/Gjx26A
6.备注:
英国厉害了,客服准备被全线打爆。银发人士又开不了啦!

Links booklink

Contact Us: admin [ a t ] ucptt.com