3 ms·
Being vulnerable to blunt objects does not mean you shouldn’t care about other attack vectors.
by deno 9y ago
Being vulnerable to blunt objects does not mean you shouldn’t care about other attack vectors.
- tIONTamINariciA 9y agoOverly focusing on one attack vector still leaves you vulnerable to many others. System designers need to consider risk:reward and effort:reward for users. The paper offers an interesting but extreme extension into one aspect of security that users control. That is great to offer an extreme solution for the paranoid. If implemented well, even the less paranoid could use it. Sadly this solution still offers less security than systems integrated into SSO/OAuth and 2FA.
- deno 9y ago> Sadly this solution still offers less security than systems integrated into SSO/OAuth and 2FA. OAuth implementations very often have vulnerabilities. Just look at how many Facebook had! Not to mention 1) it doesn’t scale like passwords and 2) all the privacy implications. As for 2FA it’s in addition to primary authentication scheme, like a password, not instead.