5 ms·
This is a very good example of vulnerability introduced by badly organized security system. One does not keep backup access codes in places which are unavailabl
by Andrew_nenakhov 4y ago
This is a very good example of vulnerability introduced by badly organized security system. One does not keep backup access codes in places which are unavailable in case of a failure of primary access methods. Store your 2FAs in a separate phone kept in a SAFE, a combination to which you do remember. Also, adding 2FA to a password manager is probably excessive, just use a really long password which is easy to remember. Like "HowOn5EarthsCanAPersonForgetHisPazzw0rdToPasswordManager?", that'll be enough.
- avsteele 4y agoWith no second factor you are vulnerable to anything that could sniff your password. I guess this is fine as long as you never log on from any untrusted machine/location?
- viraptor 4y agoAlso any phishing you don't notice, or many browser hacks. A good 2fa (u2f, fido) authenticates you to the service, but also verifies the service is what you expect.
- Andrew_nenakhov 4y agoI'm rather averse to using cloud services for password management. KeePass all the way, syncing the key file with syncthing or something.
- fullstop 4y agoThe author's codes were kept (on paper) in a safe, but the contents were destroyed in the fire.
- roopepal 4y agoJust in case you did not notice, this did not actually happen, it was a hypothetical.
- deleted 4y ago[deleted]