2 ms·
> If your Mac gets popped, attackers are going to own the kernel, and thus your keystrokes. Right, but at that point the account is effectively already comprom
by morgante 11y ago
> If your Mac gets popped, attackers are going to own the kernel, and thus your keystrokes.
Right, but at that point the account is effectively already compromised.
Even if I have a second factor, they can just piggyback on the session I create when logging in via that second factor.
- tptacek 11y agoThat's only true if you routinely log into those services. If they pop your Mac, they get all your 1Password passwords. I like 1Password, and this isn't a flaw in 1Pw, it's just the limitations of relying on your computer for secret storage.
- morgante 11y agoGood point, I hadn't considered the exploitation of sites I don't log into. Sadly, the sites which I would most like to secure in this way (ie. important but I don't use often) invariably are stuck with ancient authentication technology.