News for hackers. Stuff that matters.
Re:Cierge – passwordless authentication by rovek on Friday January 12, 2018 @05:58AM (#16131974)
Many services now allow password reset by email (magic link), Cierge's approach just does away with the illusion of security employed by such services. Outsourcing authentication to email, as many services do with Google/Facebook/Github accounts.

The Cierge login approach would obviously be inadvisable for protecting something of importance, like your email account.

Re:Cierge – passwordless authentication by rasengan on Friday January 12, 2018 @06:23AM (#16132095)
When user password are used for security, proper services have additional questions (in other words 2FA) to reset your password by email.
Re:Cierge – passwordless authentication by WorldMaker on Friday January 12, 2018 @12:07PM (#16134360)
Additional questions are bonus passwords. They are not 2FA.