3 ms·
How two factor auth will prevent loss of your source code? (assuming your password is unique)
by homakov 11y ago
How two factor auth will prevent loss of your source code? (assuming your password is unique)
- saryant 11y agoKeyloggers? Social engineering around the password reset function? I use 2FA on all my personal accounts that support it (Twitter, Github, Gmail, Namecheap, banks).
- icebraining 11y agoIf a software can log your keypresses, it can probably steal your cookies and log in as you from your machine. Cookies stored by browsers are easily readable by processes running as the same user.
- bigiain 11y agoIt will help when my unique password get exposed through any of the many likely routes that don't give the attacker complete code execution on the servers - SQLi or using XSS to steal admin tokens for example.
- homakov 11y agoInteresting, sqli that works only for reading encrypted_hash from DB? But since password is unique it cannot be bruteforced even locally.
- bigiain 11y agoTrue - it's the (many many documented[1]) cases where the SQLi grabs the password_cleartext column, not the encrypted_hash one that worry me here. [1] http://plaintextoffenders.com/ http://plaintextoffenders.com/