4 ms·
But then users store these passwords on a sticky note attached to their display device…
by heavenlyblue 5y ago
But then users store these passwords on a sticky note attached to their display device…
- UncleMeat 5y agoWhich is pretty good against some real threats. Evil maids are very rare in comparison to credential stuffing.
- bawolff 5y agoIts debatable how bad that is. For most (not all) people, the realistic threats do not have physical access to your computer. However, this is kind of my point - you might put your password on a sticky not. In TOTP 2FA the equivalent is your qr code. I have never seen anyone print out a qr code and put it on a sticky note beside their computer.