Nemeski@lemm.ee to Privacy Guides@lemmy.oneEnglish · 8 个月前Signal under fire for storing encryption keys in plaintextstackdiary.comexternal-linkmessage-square44fedilinkarrow-up1209arrow-down10cross-posted to: cybersecurity@sh.itjust.worksprivacy@lemmy.worldfoss@beehaw.orgprivacy@lemmy.ca
arrow-up1209arrow-down1external-linkSignal under fire for storing encryption keys in plaintextstackdiary.comNemeski@lemm.ee to Privacy Guides@lemmy.oneEnglish · 8 个月前message-square44fedilinkcross-posted to: cybersecurity@sh.itjust.worksprivacy@lemmy.worldfoss@beehaw.orgprivacy@lemmy.ca
minus-squareboredsquirrel@slrpnk.netlinkfedilinkEnglisharrow-up1·8 个月前A password can be cracked and is often very bad.
minus-squareVenia Silente@lemm.eelinkfedilinkEnglisharrow-up1·8 个月前But that can be said of any of the other such called factors: A yubikey can be stolen A fingerprint can be scanned and distributed So its not really an argument against passwords (or passkeys, or passwordless, or whatever marketing want to call them these days).
minus-squareAlwaysTheir@lemmy.onelinkfedilinkEnglisharrow-up2·8 个月前My yubikey can be stolen but good luck guessing my PIN in the 3 to 9 tries allowed before it self destructs.
minus-squareVenia Silente@lemm.eelinkfedilinkEnglisharrow-up1·8 个月前luck? I have a $5* wrench. * (Actually a $7 wrench. Inflation is murder around here.)
minus-squareAlwaysTheir@lemmy.onelinkfedilinkEnglisharrow-up2·8 个月前If you have me… you win. My technology however will never betray me.
minus-squareboredsquirrel@slrpnk.netlinkfedilinkEnglisharrow-up2·8 个月前Most people just need to fear their passwords being cracked remotely. In masses. If your threat model is being known, people stealing your stuff to login to your things, this is very high.
A password can be cracked and is often very bad.
But that can be said of any of the other such called factors:
So its not really an argument against passwords (or passkeys, or passwordless, or whatever marketing want to call them these days).
My yubikey can be stolen but good luck guessing my PIN in the 3 to 9 tries allowed before it self destructs.
luck? I have a $5* wrench.
* (Actually a $7 wrench. Inflation is murder around here.)
If you have me… you win. My technology however will never betray me.
Most people just need to fear their passwords being cracked remotely. In masses.
If your threat model is being known, people stealing your stuff to login to your things, this is very high.