3 ms·
Authy on desktop sounds like such a terrible idea, though. Take that second factor and put it right next to the first.
by therein 6y ago
Authy on desktop sounds like such a terrible idea, though. Take that second factor and put it right next to the first.
- yumraj 6y agoNot sure I get it. 2FA does not protect anyone from someone having your password AND having your phone or desktop. It prevents from someone, somewhere, having your password but not your 2nd factor.
- tonyedgecombe 6y agoIf someone manages to put software on your desktop then they have access to your password and 2nd factor.
- Spivak 6y agoBut that’s your phone too. The second factor, is practice, having access to an active session on your device.
- the_snooze 6y agoI mean, it's game over in pretty much any situation that your endpoints are compromised. It's incorrect to take these measures as giving perfect security. They're efforts to greatly increase the cost for attackers. It's a pretty good improvement to increase effort from "having a password" to "having remote access to your computer."
- tonyedgecombe 6y agoI'd still rather they didn't have direct access to my second factor in that situation.
- the_pwner224 6y agoHow is this any different from what you have on your phone? If someone hacks your phone they have access to all your email, whether you have 2fa set up or not. If someone hacks your computer in this case then they also get access to all your email. The thing that 2fa is good at is preventing hackers from logging in if they guess or find out your password. If your device is compromised then everything you do on it is vulnerable, no matter how many factors you have.