3 ms·
That's like saying MD5 is fine for hashing passwords, because it's better than plaintext.
by madeofpalk 4y ago
That's like saying MD5 is fine for hashing passwords, because it's better than plaintext.
- traceroute66 4y ago> That's like saying MD5 is fine for hashing passwords, because it's better than plaintext. No, I'm saying we need to come down to planet earth and recognise we live in the real world. Hence SMS or TOTP is preferable to nothing at all. Its a bit like the hardcore open-source types who can't see the wood from the trees and cannot fathom why anyone would possibly want to use anything else other than Linux and fully open-source alternatives to Microsoft Office or Photoshop. Sometimes you have to compromise.
- oblio 4y ago> That's like saying MD5 is fine for hashing passwords, because it's better than plaintext. If for whatever reason you can't have anything else, MD5 is obviously better than plaintext. Not fine, but better. With passwords you don't have external dependencies but with MFA, you do. Things are more complicated and real life is messy.
- hatware 4y agoThey're saying perfect shouldn't be the enemy of good enough. Completely valid.