Conversation

Notices

1. Embed this notice
   prettygood (prettygood@socially.drinkingatmy.computer)'s status on Thursday, 21-Nov-2024 03:43:05 JST prettygood
   @yakumo_izuru no, you don't have to use a phone app. I do because that's what I picked. I'm just saying putting all of your eggs in the same basket drastically reduces the protection that TOTP offers you.
   • Embed this notice
     cool_boy_mew (coolboymew@shitposter.world)'s status on Thursday, 21-Nov-2024 11:59:15 JST cool_boy_mew

     in reply to
     @prettygood @yakumo_izuru IMO TOTP is not about preventing someone from getting your entire password history. Honestly, I have no idea how it would even happen. TOTP is about preventing websites passwords leaking, social engineering, password guessing and brute forcing
   • Embed this notice
     prettygood (prettygood@socially.drinkingatmy.computer)'s status on Thursday, 21-Nov-2024 11:59:15 JST prettygood

     in reply to

     • cool_boy_mew
     @coolboymew @yakumo_izuru my point still stands. The idea of "multi-factor" is something you know / something you have / something you are, which corresponds to password, another device, or a biometric, respectively.