5 ms·
Basically every website on the internet uses cookies to authenticate and verify sessions. At the end of the day, you'll always have a "single point of failure"
by dvt 5y ago
Basically every website on the internet uses cookies to authenticate and verify sessions. At the end of the day, you'll always have a "single point of failure" when you need to restore remote state. Sometimes that's a password, sometimes that's a cookie.
- SV_BubbleTime 5y agoMFA, pin code, os or tpm or browser finger printing / cookie signed to your machine, ip address or ip range lock, reauth over a short but not unreasonable time, concurrent session lock out... I would think there are few options besides just throwing your hands up and admitting failure where someone can just pay $10 for a plug and play cookie. I don't know about a giant company like EA, but you could really screw with my company's plans if you spent any time on our Slack. So now I need to consider that any malware could (and probably is) looking for slack cookies to exfil. So, no, I don't really believe there is always going to just be a single point of failure and it's an insurmountable problem.