News for hackers. Stuff that matters.

A comment on Cierge – passwordless authentication. Parent comment

Re:Cierge – passwordless authentication by hoffs on Friday January 12, 2018 @06:19AM (#16132069)
That's the point that I see as well. It's like if they get your email they will be able to get your user/password account anyways. So this seems like a decent way of getting rid of the password.
[ Parent | on HN ]
Re:Cierge – passwordless authentication by rasengan on Friday January 12, 2018 @11:23AM (#16134026)
Also want to add incase anyone is reading that you don't want to set your systems security based on some lowest denominator that you can't even secure / control.

Seems unreasonable and insecure.

[ Parent | on HN ]
Re:Cierge – passwordless authentication by rasengan on Friday January 12, 2018 @06:22AM (#16132083)
When user password are used for security, proper services have additional questions (in other words 2FA) to reset your password by email.
[ Parent | on HN ]
Re:Cierge – passwordless authentication by WorldMaker on Friday January 12, 2018 @12:09PM (#16134379)
Additional questions are bonus passwords. They are not 2FA.
[ Parent | on HN ]