News for hackers. Stuff that matters.

A comment on Getting 2FA Right in 2019. Parent comment

Re:Getting 2FA Right in 2019 by lixtra on Thursday June 20, 2019 @12:36PM (#20234569)
Password leakage is not a marginal problem. I find saved passwords in public browsers all the time. Those with TOTP are much better protected against this as well.
[ Parent | on HN ]
Re:Getting 2FA Right in 2019 by the_common_man on Thursday June 20, 2019 @01:01PM (#20234849)
Yeah, but you are not finding 1Password passwords in public browsers, are you?
[ Parent | on HN ]
Re:Getting 2FA Right in 2019 by giobox on Thursday June 20, 2019 @05:01PM (#20237331)
1Password also has a web UI, so yes it is still very possible to copy a password from 1Password and accidentally save it on a public browser.

Not to mention the simplest: type in password from 1Password on phone on public browser. Accidentally save password.

[ Parent | on HN ]
Re:Getting 2FA Right in 2019 by lixtra on Thursday June 20, 2019 @01:03PM (#20234877)
Sadly, I found ones from colleagues that use 1Password and even to me it happened that I clicked save for password that I didn’t want to save in that environment.
[ Parent | on HN ]