5 ms·
Do you use keep your secrets in an offline database that is on a non-networked/air-gapped device?
by ngrilly 3y ago
Do you use keep your secrets in an offline database that is on a non-networked/air-gapped device?
- deleted 3y ago[deleted]
- namaria 3y agoThat's whataboutism. I'm not claiming my methods are unassailable. I'm disputing the notion that anyone can claim that about their methods. The key difference is, I know the weaknesses on my approach and I mitigate for them. I'm not reaching for whishful thinking. Anyone claiming security by "I don't see an attack vector" should be doubted.
- ngrilly 3y agoAgreed. But then what is the point you were trying to make when asking "You think that there's data on a networked device that is absolutely safe?"?
- namaria 3y agoQuestioning your claim of > Your biometric data never leave your device and are never shared with "some corporation". Like I said, I never claimed my ways are 100% safe. I am questioning the claim that biometrics on phones is 100% safe. You realize you just whatabouted again?
- ngrilly 3y agoYou're moving the goalpost. That conversation started when you explained that you'd rather use something you know than let some corporation manage you biometric data. But it's simply not true that some corporation is managing your biometric. That's why I replied that those systems are designed so that the biometric data don't leave the device. They are only needed locally. Yes, I shouldn't have used the word "never" because the system is probably not perfect and may be hacked. But this is true as well of using an offline password manager that you unlock using something you know (key loggers, etc.). To conclude, I agree that biometrics on phones are probably not 100% safe, like most things in life, and computing.