News for hackers. Stuff that matters.

A comment on I want a computer that I own. Parent comment

Re:I want a computer that I own by XorNot on Tuesday March 09, 2021 @04:57PM (#26404894)
If your device is compromised to the point that someone is reading out the content of non-online, encrypted DBs, or keylogging aggressively, then they've also got your email and can much more easily just send a password reset to 90% of everything out there.

2FA as the internet uses it has always been about dealing with accidental disclosure and public PCs.

[ Parent | on HN ]
Re:I want a computer that I own by demosito666 on Wednesday March 10, 2021 @10:14AM (#26412036)
As an owner of Xiaomi phone I consider all data on it to be available to mid- and high-profile parties at least in China. Which might eventually leak into my country as well.

That's why my phone doesn't have any bank software installed and doesn't have any password saved. It is logged into my google account though to which you probably can restore some passwords, but for all resources I care about (banking, investements, crypto, etc.) it's not possible. I also use separate email for those. If my HN or reddit account will be compromised via my phone - so be it, I don't really care. I can also tolerate compromised 2FA app as it's useless without passwords which are stored on another machine.

[ Parent | on HN ]