• 2 Posts
  • 87 Comments
Joined 1 year ago
cake
Cake day: August 2nd, 2023

help-circle
  • SMS is fine for 2FA, as long as you can’t use it for anything else, like a password reset.

    Once the SMS is used for account recovery, it’s now 1FA with a terrible security hole.

    If you have complex, single use passwords, and have SMS 2FA, then it’s pretty ok. Not the best security, but at least better than a most.

    Obviously offline time based passkeys are better for the 2FA, but typically the real problem is how to get into an account if you’ve lost one part of your login.














  • mipadaitu@lemmy.worldtoPrivacy@lemmy.mlI'm losing faith
    link
    fedilink
    English
    arrow-up
    82
    ·
    2 months ago

    I fight for privacy to protect myself.

    Now, what am I protecting myself from? I don’t think anyone is going to come arrest me for what I do. I don’t think any big companies are going to leak my data and embarrass me. I don’t think anyone is going to compromise my bank and drain my funds.

    I am protecting myself from being influenced by advertising and targeted news.

    I am protecting my thoughts and feelings, because in the end, that’s all that really matters. I don’t want to need the next toy, or jump on a bandwagon. I don’t want to see advertising and I don’t want a carefully crafted worldview pushed on me.