Comment Re:No need for security (Score 5, Informative) 97
I strongly disagree with the idea that some accounts “don’t need security.” Attackers don’t care whether an account seems unimportant; they target anything weak because everything is automated. A compromised “low-value” account can still be used to send spam, spread malware, impersonate you, or post junk that gets you banned. The real danger is password reuse: once an attacker gets a password from a trivial site, they immediately try it on your email, cloud accounts, banking, shopping, everything. That’s how most real-world compromises happen. Even an account you don’t care about still reveals useful data like email addresses, usernames, and login patterns, which attackers use for profiling and pivoting. And if someone abuses your account, you’re the one stuck cleaning up the mess. Using unique passwords and a manager takes seconds; cleaning up identity or account compromise takes days. Security isn’t about whether you think the account matters — it’s about removing the weak link that attackers will exploit.
