News for hackers. Stuff that matters.

A comment on Getting 2FA Right in 2019. Parent comment

Re:Getting 2FA Right in 2019 by scrollaway on Thursday June 20, 2019 @11:34AM (#20233937)
It's two-step with a unique key every login. It wipes out phishing, password reuse and password leaks as vectors.
[ Parent | on HN ]
Re:Getting 2FA Right in 2019 by professorTuring on Thursday June 20, 2019 @11:48AM (#20234073)
It doesn't wipe phising. Phising is getting more and more complex, now phising sites ask you for your ToTP to gain control to your account in real-time. And that's one of the origins of FIDO2. - https://fidoalliance.org/fido2/
[ Parent | on HN ]
Re:Getting 2FA Right in 2019 by UncleMeat on Thursday June 20, 2019 @03:15PM (#20236262)
Unique passwords wipe out password leaks as a vector. Anything where you type in a code is also still phishable.
[ Parent | on HN ]
Re:Getting 2FA Right in 2019 by scrollaway on Thursday June 20, 2019 @09:02PM (#20238984)
People can still log into your account if your unique password leaks. It just prevents them logging into your other accounts.

Point is, TOTP isn't useless.

[ Parent | on HN ]
Re:Getting 2FA Right in 2019 by dmoy on Thursday June 20, 2019 @11:52AM (#20234107)
What's the second factor for 1password?
[ Parent | on HN ]
Re:Getting 2FA Right in 2019 by graeme on Thursday June 20, 2019 @03:32PM (#20236468)
They added 2fa with duo security + a few other methods.
[ Parent | on HN ]