3 ms·
> TOTP does not defend ordinary users against phishing I never said it ultimately defends ordinary users, just that it reduces the chances because it requires
by mbesto 7y ago
> TOTP does not defend ordinary users against phishing
I never said it ultimately defends ordinary users, just that it reduces the chances because it requires a more sophisticated attack.
- tptacek 7y agoYou said attackers need to be "extremely sophisticated" to pull it off, and I've spent a year seeing nitwits – clumsy and trivially detected nitwits – do it without much trouble. You were wrong, and wrong in a way that's important to correct so people know that it's wrong.
- mbesto 7y agoAnd I've seen the opposite, what's your point? How do you qualify "clumsy and trivially detected nitwits"? PS - Telling people they are "wrong" isn't convincing, and is downright condescending. Thanks for that.