Re:Bye, Bye, Google
by ggm on Monday February 04, 2019 @02:25PM
(#19079745)
You have to ask yourself what's the primary threat. Yes,the point in strong sense of a second factor is a fully independent test. But the actual threat it mostly protects against is credentials threats. Not loss of devices or compromise of a keystore. SMS as second factor is way way worse because of the porting problem. Otp inside 1password is a compromise but it protects against the primary threat.
If you crypt your disk and use a good passphrase or a long pin and passphrase on a phone you are not that badly exposed.
If you crypt your disk and use a good passphrase or a long pin and passphrase on a phone you are not that badly exposed.