News for hackers. Stuff that matters.

A comment on Who’s behind Wednesday’s epic Twitter hack?. Parent comment

Re:Who’s behind Wednesday’s epic Twitter hack? by VectorLock on Friday July 17, 2020 @01:54AM (#23867506)
If the "layers" of your security use the same factors are they really layers or are they simply a time sink for you permitted users, and another thing to break?

My visceral reaction was "you got to have a VPN" as well but the more I thought about it the more I was convinced you don't _need_ a VPN.

[ Parent | on HN ]
Re:Who’s behind Wednesday’s epic Twitter hack? by HaloZero on Friday July 17, 2020 @02:16AM (#23867652)
Effectively are you saying: if I hacked your account I hacked your VPN username/password too? It's still an extra step that might trigger some sketchy senses of some people.

Not sure if it still doesn't work effectively for that.

[ Parent | on HN ]
Re:Who’s behind Wednesday’s epic Twitter hack? by kortilla on Friday July 17, 2020 @02:22AM (#23867693)
If your only threat model is leaked credentials and not vulnerabilities, sure.
[ Parent | on HN ]
Re:Who’s behind Wednesday’s epic Twitter hack? by VectorLock on Friday July 17, 2020 @10:27AM (#23870797)
Or if your threat model accounts for the prevalence of stolen credentials and end-point compromise vs. the vulnerability of your exposed application attack surface.
[ Parent | on HN ]