3 ms·
2FA matters very little when you have never expiring tokens.
by guappa 2y ago
2FA matters very little when you have never expiring tokens.
- dawnerd 2y agoAnd thanks to the likes of composer and similar devs end up making non expiring tokens to reduce annoyance. There needs to be a better system. Having to manually generate a token for tooling can be a drag.
- blueflow 2y ago2FA also matters little if the attacker has compromised your machine. They can use your 2FA-authenticated session.
- guappa 2y agoOnly once… but if they can get your forever token… that's not the same.
- GoblinSlayer 2y agoOnce is enough.