3 ms·
> Oh dear. The issue isn’t the brute force, it’s that the online services leak and get cracked. And in an instant a single script takes the newly discovered use
by autoexec 2y ago
> Oh dear. The issue isn’t the brute force, it’s that the online services leak and get cracked. And in an instant a single script takes the newly discovered username password combo and starts hammering it into the top 10000 websites, all within moments of the leak data becoming available.
This is only ever a problem if your password is reused. Don't reuse passwords and if some website is hacked and they were storing your password in plaintext you just have to reset your password (the same way everyone else does, 2FA or not)
- c22 2y agoAlso don't re-use email addresses.
- robertlagrant 2y ago> This is only ever a problem if your password is reused That is the context of the reply, although I think they misread the article.
- evolve2k 2y agoThe larger problem is when your password gets hacked for whatever reason that the MFA protects your account. Anyone else here had friends have their say Instagram account hacked, none ever have MFA on and it causes great distress. MFA IS a good idea for multiple reasons.
- sam_lowry_ 2y agoMFA is bad idea for as many reasons if not more: complexity of implementation, variety, digital sovereignty... to name a few.