4 ms·
"With the passwords you're talking about, a malicious site would gain access to all of your accounts as soon as you created an account with them, which is one o
by jetti 14y ago
"With the passwords you're talking about, a malicious site would gain access to all of your accounts as soon as you created an account with them, which is one of the major problems with password reuse today."
First they would need to know the scheme. Second, one wouldn't haven't to follow that schema at all, you could use something simple and easy to remember for each site. Also, as I don't know the implementation behind this, but couldn't a malicious site do the same with clef with a man in the middle attack (as stated elsewhere in the comments)?
Another question: how would mobile browsing work? If I wanted to log into one of these sites on my mobile device, how would I do that?
- brennenHN 14y agoThis is a feature which will be out with our next release. When we detect the visit from a smartphone, we change the QR to a button, and when it is pressed we redirect you through the app, where you verify your PIN, then redirect you back to your browser where you are logged in.
- jetti 14y agoPretty spiffy. Good luck with your product!