News for hackers. Stuff that matters.

A comment on Google: Security Keys Neutralized Employee Phishing. Parent comment

Re:Google: Security Keys Neutralized Employee Phishing by manicdee on Tuesday July 24, 2018 @12:23AM (#17598098)
How is that materially different to storing the password and TOTP in 1Password?
[ Parent | on HN ]
Re:Google: Security Keys Neutralized Employee Phishing by tptacek on Tuesday July 24, 2018 @12:27AM (#17598112)
Obviously, because if you compromise my desktop, you still won't have my TOTP secrets.
[ Parent | on HN ]
Re:Google: Security Keys Neutralized Employee Phishing by manicdee on Tuesday July 24, 2018 @10:18AM (#17601210)
But what if I seize your phone at a customs inspection, or a traffic stop? Don't I then have password and OTP?
[ Parent | on HN ]