News for hackers. Stuff that matters.
Re:Dropbox employee’s password reuse led to theft of 60M+ us... by dredmorbius on Wednesday August 31, 2016 @06:44AM (#12397310)
Key disclosure and key loss are things.

The first makes your public key useless for security. The second locks you out of everything.

So you've still got to have patterns-of-fraudulent-use detection, and some sort of token-reset mechanism.

Persistent data encryption is another option, but that compounds the key-loss problem in that you cannot access earlier data.

There are no comments on this comment yet.