17 ms·
If a user keeps their credentials in a notebook and it got stolen, the TOTP check can be the difference between the attacker getting in, and the user being noti
by yonatan8070 2y ago
If a user keeps their credentials in a notebook and it got stolen, the TOTP check can be the difference between the attacker getting in, and the user being notified and changing their password
- yardstick 2y agoUnfortunately these days it’s even easier with password managers containing all three (user, pass, token)
- ThePowerOfFuet 2y agoThe difference being the notebook is paper and easily read, while the password manager is... quite a bit harder.
- yonatan8070 2y agoI want to believe users who use a password manager are also technically literate enough to secure it properly
- Avicebron 2y agoMe too, but my day job means I handle a bit of secops, password managers are rolled out as security tools to users operating in enterprises where things like mandating people don't keep their passwords on a sticky note on their monitor is usually step one...