4 ms·
Which is why a properly working password manager is not a strong defense against phishing.
by akerl_ 1y ago
Which is why a properly working password manager is not a strong defense against phishing.
- otterley 1y agoCorrect. The moral of the story is that hardware MFA and/or passkeys are a necessity in today's world. An infinitely complex password and 2FA are no match for attacks that leverage human psychology.
- onionisafruit 1y agoIt's a strong defense that this guy decided not to use
- akerl_ 1y agoUser security that doesn’t meet real users where they are is just nerd theatre.
- onionisafruit 1y agoIt works for me. I’m unconcerned if it works for anybody else.
- otterley 1y agoIt works for lots of people, until it doesn't. You may well fall victim to such a scheme someday.
- onionisafruit 1y agoThat’s almost guaranteed now that I made such a confident statement that it works for me.
- jopsen 1y agoNot a strong defense, but it helps. But it's also why sites that don't work well with a password manager are actively setting their users up to be phished. Same with every site that uses sketchy domains, or worse redirects you to xyz.auth0.com to sign in.