3 ms·
> Unless you're asserting that the hardware token is just as crackable as a password That's completely outside the scope of what I was describing. You've taken
by Someone1234 9y ago
> Unless you're asserting that the hardware token is just as crackable as a password
That's completely outside the scope of what I was describing. You've taken my words out of context.
- hirsin 9y agoI'd be open to hearing the right context, since I read it the same way. "Replaces PWs 1:1" is only true in the context of... the attacker only uses stolen passwords and doesn't rely on password dumps? Even in a targeted attack scenario, where the attacker would have to specifically target you to steal creds, this is better, as they'd now have to physically find you and take the key.