News for hackers. Stuff that matters.

A comment on Hackers breached Colonial Pipeline using compromised password. Parent comment

Re:Hackers breached Colonial Pipeline using compromised pass... by sofixa on Saturday June 05, 2021 @01:21PM (#27406885)
Personally i prefer TOTP. It can be phone or card based, but it's very easy to use, deploy, and rotate. The logistics of shipping and rotating physical smartcards to employees, not to mention having said employees carry that smartcard around with them, seems too much for basically no gain.
[ Parent | on HN ]
Re:Hackers breached Colonial Pipeline using compromised pass... by g_p on Wednesday June 09, 2021 @06:21PM (#27454056)
One downside of TOTP is that there's no phishing protection - a TOTP credential can be phished, relayed and replayed in real-time.
[ Parent | on HN ]