4 ms·
What could possibly go wrong when using a device that is connected to the Internet as a 2nd form factor? That's not just a criticism of this app: all the apps
by martinced 14y ago
What could possibly go wrong when using a device that is connected to the Internet as a 2nd form factor?
That's not just a criticism of this app: all the apps that advertize a device that is connected to the Internet as a "2nd form factor" is using deception to lure people in.
There's no way this is "Two-Factor" in the same way that a physical RSA token is "Two-Factor".
- SCdF 14y agoI'm not sure what you mean here. Everything is stored locally, so it's not like it's going off to a website to get your token. Are you saying that because the device is networked it is by definition vulnerable to hackers and so cannot be a high quality 2FA device? If so I completely agree, except to point out that if I use a couple of banks (some are better for cards, some are better for savings), and Google and I play WoW and I (insert other service that uses 2FA here) then that's going to be a lot of physical doo-dads I have to keep track of. It's an unfortunate reality, but having all these things attached to one 'smart' device is the only real way of making them viable after you get more than one.
- marshray 14y agoKeep in mind that you're usually expected to enter the OTP generated by the RSA token into the same web browser that sees your password. It just makes it so the attacker has to exploit the stolen credentials right away, instead of storing them for later use. I think there's some value in that though.