3 ms·
> Email Security: ...Should someone gain access to another user's inbox, they simultaneously receive the keys to logging into profiles that run on magic links.
by MrDunham 4y ago
> Email Security: ...Should someone gain access to another user's inbox, they simultaneously receive the keys to logging into profiles that run on magic links. Therefore, a single cyber-attack on your email could lead to unwanted activity on many of your utilized virtual services
This statement only partially covers the problem.
I once had a cofounder leave my company on bad terms. He had access to the bank accounts, I had email admin.
It took me 5 seconds to get full bank account access and lock him out with access to his email ("forgot password").
It's astounding how much of a skeleton key our inbox has become. This community doesn't need reminding, but our families do.
- pastage 4y agoI hope you do not use banks that use just email for authentication anymore. Horribly insecure.
- aaaaaaaaata 4y agoWhat bank due you use that's MFA key only, with no easy fallbacks?