3 ms·
Based. It's trivially easy to generate passwords with 128 bits of entropy and have them managed by a password manager. Until the password manager gets hacked.
by mike_hock 3y ago
Based.
It's trivially easy to generate passwords with 128 bits of entropy and have them managed by a password manager.
Until the password manager gets hacked. Well, tough shit. If your primary device gets hacked, the hacker just has to wait until the next time you log in with the bullshit gazillion factor authentication.
And it always collapses to 1FA for the lost password recovery process, which you're gonna have to provide if you want customers.
- r00fus 3y ago> Until the password manager gets hacked. Well, tough shit. If your primary device gets hacked, the hacker just has to wait until the next time you log in with the bullshit gazillion factor authentication. Can you elaborate? This scenario assumes that a) the primary device is the only 2FA option b) there is no one-time codes and c) the attacker persistently waits until a 2FA request comes through then somehow hijacks it with their own connection request?
- mike_hock 3y agoNah, he just hijacks your session directly.