4 ms·
From an old IT guy, none of this is new ... Scott Adams (of Dilbert) noted it in 1998: http://dilbert.com/strip/1998-04-06 http://dilbert.com/strip/1998-04-06
by Area12 10y ago
From an old IT guy, none of this is new ... Scott Adams (of Dilbert) noted it in 1998: http://dilbert.com/strip/1998-04-06 http://dilbert.com/strip/1998-04-06
That was 18 years ago.
Particularly raw for Dilbert: "Squeal like a pig" is from the 1972 movie "Deliverance" and refers to a assault that was one of the most disturbing US mainstream movie scenes of the 1970s.
The only real improvement in all that time that I can think of: password managers. I almost said Single Sign On, but that comes with its own security issues.
- nutjob123 10y agoTwo factor authentication is a major improvement. Combined with a password manager is a pretty good combination.
- tajen 10y ago> Combined with a password manager is a pretty good combination. So 2FA combines something you have (your phone) with something your phone knows.
- crpatino 10y agonot if you access the site from a laptop/desktop
- rahkiin 10y agoExactly! And I use 1Password so I also have the tokens on my computer, together with my passwords. Replay attacks get harder though.
- justinlardinois 10y agoI think his point was that if your password is stored on your phone, two factor authentication doesn't actually add any security because it's no longer two factor.
- deleted 10y ago[deleted]
- Area12 10y agoGood point, forgot that one even though I use it.
- greendragon 10y ago2FA seems a modest improvement at best, especially when it boils down to a TOTP secret you can use anywhere. (I have a greasemonkey script that enters my required '2fa' token for me.) With a yubikey form factor it's much better... It's also relatively useless if you already have a strong password and don't re-use it, i.e. a password manager. Sure it may stop someone from logging in as you if they just have your (unique) password, but if you consider the ways they can just have your (unique) password that doesn't really matter.