Re:Disqus Security Alert: User Info Breach
by gervase on Friday October 06, 2017 @08:14PM
(#15421441)
Except you won't keep it only in your head: you'll be typing it into a computer at some point. Really, in either case, you should also be using token-based 2FA as well.
[ Parent
| on HN ]
Re:Disqus Security Alert: User Info Breach
by jMyles on Friday October 06, 2017 @08:17PM
(#15421458)
OK, so a surreptitious keylogger still defeats this config. I'm OK with that. My entire life presumes trust from my keyboard to my computer.
I mean, if that were my main concerns, I'd have to rethink most of the bedrock security precautions I take, like passphrases for private SSH keys, etc.
At the end of the day: I understand the risks and view them as absolutely acceptable in order to gain reasonable portability in a password manager.