Technology

59565 readers

3775 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each another!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago

MODERATORS

285

Researcher uncovers one of the biggest password dumps in recent history (arstechnica.com)

submitted 10 months ago by throws_lemy@lemmy.nz to c/technology@lemmy.world

33 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] KairuByte@lemmy.dbzer0.com 14 points 10 months ago (3 children)

As long as that factor is auth app based, and not email/text/call/proprietary app I’m all in. If I need to go digging for the second factor for 5 minutes, I’m almost always going to turn it off. Texts emails and calls all get delayed regularly, and it’s super fun to have to sit with my thumb up my ass waiting 10 minutes for an OTP that was good for 5.

[–] 1984@lemmy.today 5 points 10 months ago (1 children)

I think for email it's essential, it's critical that someone doesn't make it into your email. Otherwise they can reset all your other passwords.

I have mfa on my account but I just click a checkbox after first time to not ask again. I'm still protected by it and don't have to do anything until I clear my cookies (which I don't for email).

[–] Scolding7300@lemmy.world 2 points 10 months ago* (last edited 10 months ago) (1 children)

I think they're thinking of TOTP noy being the standard, where you'd just pull out your totp app and paste it without waiting

[–] KairuByte@lemmy.dbzer0.com 2 points 10 months ago

Precisely, my brain just completely forgot the term for it and after minutes of not being able to remember for the list of my I just loosely described it. TOTP is exactly what I meant.

[–] stealth_cookies@lemmy.ca 5 points 10 months ago

Ideally they also support a hardware key. Not nearly enough websites out there support FIDO/Webauthn.

[–] Akuchimoya@startrek.website 1 points 10 months ago

One time I had to use a website where the email 2FA expired in 30 seconds! I usually keep my email client open while my computer is on, but, come on, that was ridiculous.