3 ms·
Not sure I get it. 2FA does not protect anyone from someone having your password AND having your phone or desktop. It prevents from someone, somewhere, having
by yumraj 6y ago
Not sure I get it. 2FA does not protect anyone from someone having your password AND having your phone or desktop.
It prevents from someone, somewhere, having your password but not your 2nd factor.
- tonyedgecombe 6y agoIf someone manages to put software on your desktop then they have access to your password and 2nd factor.
- Spivak 6y agoBut that’s your phone too. The second factor, is practice, having access to an active session on your device.
- the_snooze 6y agoI mean, it's game over in pretty much any situation that your endpoints are compromised. It's incorrect to take these measures as giving perfect security. They're efforts to greatly increase the cost for attackers. It's a pretty good improvement to increase effort from "having a password" to "having remote access to your computer."
- tonyedgecombe 6y agoI'd still rather they didn't have direct access to my second factor in that situation.