3 ms·

> Do you and people you know have a safe? Yes. I'm not taking about a safe like you can see in the movies. Just a locked box. > Where I'm from, we generally d

> Do you and people you know have a safe? Yes. I'm not taking about a safe like you can see in the movies. Just a locked box. > Where I'm from, we generally don't use safes. That's on you. > Do you consider your safe to be... safe? I'd imagine it to be relatively easy to get into, by picking the lock or sawing through the safe. That's not the point. 2FA is about thwarting password leaks. If someone has physical access to my house and knows my passwords, I'm screwed, yes. But since I don't live in a Jason Bourne movie, my threat model isn't a ninja who steals my passwords then comes into my house to hack my tiktok account. My threat model is breaking my phone and knowing that my backup passwords are in a minimally safe place where I expect them to be and weren't carelessly thrown away with old documents; and deter casual "attackers" like a niece who could be inclined to plunder my papers for coloring material. And if I did live in a Jason Bourne movie, I'd expect the ninja to just beat me up when I get home and unlock my safe for him, assuming I had bought an unbreakable safe.

cooperadymas 3y ago
> And if I did live in a Jason Bourne movie, I'd expect the ninja to just beat me up when I get home and unlock my safe for him, assuming I had bought an unbreakable safe. Here I was thinking you might blow him up with the toaster. Or crash him into a garbage truck after an extenuated car chase.
- TeMPOraL 3y ago
  We live in the era of smart toasters. You'll need to use your 2FA tool before you can blow someone up with it, which kind of defeats the point when chased by a ninja that's after your 2FA tool.
mardifoufs 3y ago
So 2FA is just for the tiny, tiny minority with a safe? What... Am I missing an obvious joke here?
- deadbunny 3y ago
  Or you know, a drawer with a notebook in it.
JohnFen 3y ago
> > Where I'm from, we generally don't use safes. > That's on you. Wait, are we expected to have to buy safes to use the internet now?
- xp84 3y ago
  I mean, you should have a safe for a million reasons. Mine was bought from Groupon for $50 and wouldn't even keep out a determined teen if they didn't mind the intrusion being detected. It just gives you a single location in your house which you know nobody could accidentally open up and misplace the contents. It's where our passports and other foundational government documents, ATM cards, and yes, 2FA materials go. When you keep that kind of stuff in say, a desk or nightstand drawer, it's vulnerable to the 'oh crap, we cleaned out that drawer' attack, where you or your family members toss that stuff inadvertently. Try a safe, it's great.
  - JohnFen 3y ago
    Nah, I'm good. I have all the benefits you cite without having to bother with a safe. I was just reacting to the somewhat bizarre idea that owning a safe is something we should be expecting people to do for their online stuff.
  - NavinF 3y ago
    Well said. It's hard for me to imagine how an adult could have such an uneventful life that they don't possess anything worth locking up.
    - JohnFen 3y ago
      Who said people that don't own safes don't have anything worth protecting? Safes aren't the only option.
      - xp84 3y ago
        It sounds like you're choosing to interpret "safe" far too narrowly. I understand for opsec you likely don't want to share the specifics, but if you have "all the benefits" of my safe, good for you, sounds like you've got a safe: * Single location for things you've only got one of, or which are super valuable and small * Not somewhere that a burglar would just immediately check (rules out places like "nightstand drawer") It sounds like you're just bragging that you've saved $50 by not having a true lock on your thing. I'm guessing you're pretty sure you've hidden it so well that a lock isn't worth "bothering with." Good for you! Enjoy your safe regardless.
2143 3y ago
> > Where I'm from, we generally don't use safes. > That's on you. In some places the general level of trust is so high that things like theft simply does not happen. Yes there's a possibility one might lose valuable stuff not kept in safes. There's also the possibility of loosing the keys (or forgetting the combination) of the safe. And lastly, wouldn't it be so badass ironic if the safe sent a code to your email for verification? :D

cooperadymas 3y ago

> And if I did live in a Jason Bourne movie, I'd expect the ninja to just beat me up when I get home and unlock my safe for him, assuming I had bought an unbreakable safe. Here I was thinking you might blow him up with the toaster. Or crash him into a garbage truck after an extenuated car chase.

TeMPOraL 3y ago
We live in the era of smart toasters. You'll need to use your 2FA tool before you can blow someone up with it, which kind of defeats the point when chased by a ninja that's after your 2FA tool.

mardifoufs 3y ago

So 2FA is just for the tiny, tiny minority with a safe? What... Am I missing an obvious joke here?

deadbunny 3y ago
Or you know, a drawer with a notebook in it.

JohnFen 3y ago

> > Where I'm from, we generally don't use safes. > That's on you. Wait, are we expected to have to buy safes to use the internet now?

xp84 3y ago
I mean, you should have a safe for a million reasons. Mine was bought from Groupon for $50 and wouldn't even keep out a determined teen if they didn't mind the intrusion being detected. It just gives you a single location in your house which you know nobody could accidentally open up and misplace the contents. It's where our passports and other foundational government documents, ATM cards, and yes, 2FA materials go. When you keep that kind of stuff in say, a desk or nightstand drawer, it's vulnerable to the 'oh crap, we cleaned out that drawer' attack, where you or your family members toss that stuff inadvertently. Try a safe, it's great.
- JohnFen 3y ago
  Nah, I'm good. I have all the benefits you cite without having to bother with a safe. I was just reacting to the somewhat bizarre idea that owning a safe is something we should be expecting people to do for their online stuff.
- NavinF 3y ago
  Well said. It's hard for me to imagine how an adult could have such an uneventful life that they don't possess anything worth locking up.
  - JohnFen 3y ago
    Who said people that don't own safes don't have anything worth protecting? Safes aren't the only option.
    - xp84 3y ago
      It sounds like you're choosing to interpret "safe" far too narrowly. I understand for opsec you likely don't want to share the specifics, but if you have "all the benefits" of my safe, good for you, sounds like you've got a safe: * Single location for things you've only got one of, or which are super valuable and small * Not somewhere that a burglar would just immediately check (rules out places like "nightstand drawer") It sounds like you're just bragging that you've saved $50 by not having a true lock on your thing. I'm guessing you're pretty sure you've hidden it so well that a lock isn't worth "bothering with." Good for you! Enjoy your safe regardless.

2143 3y ago

> > Where I'm from, we generally don't use safes. > That's on you. In some places the general level of trust is so high that things like theft simply does not happen. Yes there's a possibility one might lose valuable stuff not kept in safes. There's also the possibility of loosing the keys (or forgetting the combination) of the safe. And lastly, wouldn't it be so badass ironic if the safe sent a code to your email for verification? :D