Nemeski@lemm.ee to Privacy Guides@lemmy.oneEnglish · 4 months agoSignal under fire for storing encryption keys in plaintextstackdiary.comexternal-linkmessage-square45fedilinkarrow-up1184arrow-down10cross-posted to: privacy@lemmy.worldprivacy@lemmy.mltechnology@lemmy.worldfoss@beehaw.org
arrow-up1184arrow-down1external-linkSignal under fire for storing encryption keys in plaintextstackdiary.comNemeski@lemm.ee to Privacy Guides@lemmy.oneEnglish · 4 months agomessage-square45fedilinkcross-posted to: privacy@lemmy.worldprivacy@lemmy.mltechnology@lemmy.worldfoss@beehaw.org
minus-squareboredsquirrel@slrpnk.netlinkfedilinkEnglisharrow-up3·4 months agoSomething you know, something you have, something you are. 3FA: Pin Security Key/TPM/Secure element fingerprint / iris scan You could also start with just one of these
minus-squareVenia Silente@lemm.eelinkfedilinkEnglisharrow-up1·4 months agoIsn’t the idea that not everyone has access to your biometrics? There’s honestly no need to make computers ask people for piss scans: something you know A password something you have Access to the password something you are The person who knows the password
minus-squareboredsquirrel@slrpnk.netlinkfedilinkEnglisharrow-up1·4 months agoA password can be cracked and is often very bad.
minus-squareVenia Silente@lemm.eelinkfedilinkEnglisharrow-up1·4 months agoBut that can be said of any of the other such called factors: A yubikey can be stolen A fingerprint can be scanned and distributed So its not really an argument against passwords (or passkeys, or passwordless, or whatever marketing want to call them these days).
minus-squareboredsquirrel@slrpnk.netlinkfedilinkEnglisharrow-up2·4 months agoMost people just need to fear their passwords being cracked remotely. In masses. If your threat model is being known, people stealing your stuff to login to your things, this is very high.
minus-squareAlwaysTheir@lemmy.onelinkfedilinkEnglisharrow-up2·4 months agoMy yubikey can be stolen but good luck guessing my PIN in the 3 to 9 tries allowed before it self destructs.
minus-squareVenia Silente@lemm.eelinkfedilinkEnglisharrow-up1·4 months agoluck? I have a $5* wrench. * (Actually a $7 wrench. Inflation is murder around here.)
minus-squareAlwaysTheir@lemmy.onelinkfedilinkEnglisharrow-up2·4 months agoIf you have me… you win. My technology however will never betray me.
Something you know, something you have, something you are.
3FA:
You could also start with just one of these
Isn’t the idea that not everyone has access to your biometrics?
There’s honestly no need to make computers ask people for piss scans:
A password
Access to the password
The person who knows the password
A password can be cracked and is often very bad.
But that can be said of any of the other such called factors:
So its not really an argument against passwords (or passkeys, or passwordless, or whatever marketing want to call them these days).
Most people just need to fear their passwords being cracked remotely. In masses.
If your threat model is being known, people stealing your stuff to login to your things, this is very high.
My yubikey can be stolen but good luck guessing my PIN in the 3 to 9 tries allowed before it self destructs.
luck? I have a $5* wrench.
* (Actually a $7 wrench. Inflation is murder around here.)
If you have me… you win. My technology however will never betray me.