如今，谷歌正在做几周或几个月前就应该做的事情：它给Nest安全摄像头的所有者发电子邮件，告诉他们应该选择一个更好的密码，启用双因素身份验证（2FA），如果他们不想让陌生人劫持这些摄像头并通过互联网窥视他们的家，就要提高警惕，这在某些情况下确实发生了，包括一个真正吓坏了一个家庭的假核弹威胁。

问题是，谷歌的电子邮件实际上并没有说明为什么人们现在应该保持警惕。它一点也没有提到相机的恐惧。

“我们听到人们在使用Nest设备时遇到问题，”邮件中一行痛苦的普通行写道。

“有权访问您的凭据的人可能会导致我们最近看到的那种问题，”另一位读者写道。

电子邮件中没有任何地方描述“我们看到的”这类问题。事实上，“照相机”一词在电子邮件中甚至一次也没有出现。

平心而论，这对谷歌来说是一个两败俱伤的局面，它对这个问题不负任何责任，也不想吓跑人们。

如果该公司明确说明为什么现在是您启用2FA的好时机，它可能会吓跑人们购买其安全摄像头。人们可能没有意识到，不管摄像头的安全性有多高，只要世界上任何地方发生一次数据泄露，就会暴露出您可能在您的Nest摄像头上使用的用户名和密码。在这一点上，黑客不需要黑客：他们只是用你自己的帐户登录。

如果你对所有东西都使用相同的密码，那不是谷歌的错。说真的，别说了。使用密码管理器。现在打开2FA。

但谷歌有责任提醒其客户注意这里的危险，这也是目前唯一的一种警告。那么，我们为什么不在这篇文章中帮助谷歌一点呢？

下面是Nest的完整电子邮件：

Hello,

In recent weeks, we’ve heard from people experiencing issues with their Nest devices. We’re reaching out to assure you that Nest security has not been breached or compromised. We also want to remind you of a few easy things you can do to get the most out of Nest’s security features.

For context, even though Nest was not breached, customers may be vulnerable because their email addresses and passwords are freely available on the internet. If a website is compromised, it’s possible for someone to gain access to user email addresses and passwords, and from there, gain access to any accounts that use the same login credentials. For example, if you use your Nest password for a shopping site account and the site is breached, your login information could end up in the wrong hands. From there, people with access to your credentials can cause the kind of issues we’ve seen recently.

We take protecting our users’ security very seriously. For added password security, the team looks across the internet to identify breaches and when compromised accounts are found, we alert you and temporarily disable access. We also prevent the use of passwords that appear on known compromised lists. While we can’t stop password breaches across the internet, we’re committed to limiting the impact of compromised credentials on Nest Accounts.

While we continue to introduce additional security and safety features, we need your help in keeping your Nest Account secure. There are several ways for you to protect your home and family. Here’s what you can do:

•Enable 2-step verification: The most important thing you can do is enable 2-step verification. Security experts agree that 2-step verification offers an additional layer of security. You’ll receive a special code every time you sign in to your account. It’s easy to do – find the steps here.

•Choose strong passwords: Create a strong password and only use it for your Nest Account.

•Set up Family Accounts: Don’t let other people use your email and password to sign in to the Nest app. Invite them to share access to your home with Family Accounts.•Be alert: Be on the lookout for phishing emails designed to trick you into sharing your email address and password.

•Protect your home network: Keep your home network router software up to date and only share those credentials with people you trust. Set up and use a guest network if your Wi-Fi router supports it.

It’s a great resp***ibility to be welcomed into your home, and we’re committed to keeping you and your Nest devices safe.

If you have questi*** or need additional help, please reach out to Nest Support.

— rishi

VP/GM of Nest

下面是Nest竞争对手爱洛发出的一条略显透明的警告示例，它也可以使用work：

对客户保持透明可能会有所帮助，但谷歌也可以采取一些更具体的措施来防范这一问题，比如要求用户创建强密码，并首先设置2FA，或者如果他们想降低安全性，就有意识地选择退出。谷歌也可以让Nest采用它在其web应用程序中使用的2FA系统，但奇怪的是，这里没有。

不过，谷歌本周确实推出了一个不相关的工具来防止密码泄露：谷歌Chrome的密码检查扩展。