News for hackers. Stuff that matters.

A comment on The bleak picture of two-factor authentication adoption in the wild. Parent comment

Re:The bleak picture of two-factor authentication adoption i... by jackweirdy on Sunday December 23, 2018 @12:14PM (#18747137)
Whenever discussing this with colleagues there’s always been a bit of debate about whether OTP inside 1password constitutes 2FA or not.

On the one hand a password could be popped from the target site or phishing, and you’d still need the 2nd factor from 1password to get in.

But on the other hand, if you leave your phone lying around unlocked with a poor master password, both get popped together.

[ Parent | on HN ]
Re:The bleak picture of two-factor authentication adoption i... by IMcPwn on Monday December 24, 2018 @02:28PM (#18753808)
If you leave your phone unlocked with Google Authenticator / SMS 2fa and a weak master password, you still get popped. The only difference to me in convenience of 2fa code auto fill.
[ Parent | on HN ]