News for hackers. Stuff that matters.

A comment on Web 2.0 sucks sharp pebbles and canal water through a dirty straw. Parent comment

Re:Web 2.0 sucks sharp pebbles and canal water through a dir... by victorvscn on Monday April 25, 2022 @09:15AM (#31154064)
By the way, you're completely right about password managers. E2E + 2FA and you're done. I wonder what their solution for "single point of failure" is, because there isn't a single one that's not flawed.
[ Parent | on HN ]
Re:Web 2.0 sucks sharp pebbles and canal water through a dir... by justsomehnguy on Monday April 25, 2022 @10:41AM (#31155521)
> E2E + 2FA and you're done

Right until you lose your 2FA token, which in Google's case is your phone. And at this point YOU'RE DONE.

[ Parent | on HN ]
Re:Web 2.0 sucks sharp pebbles and canal water through a dir... by technofiend on Monday April 25, 2022 @01:13PM (#31157839)
Google's Advanced Protection Program [1] meant for high risk users (journalists, activists, etc) requires you to enroll at least one hardware token, so they do recognize that as a risk.

https://landing.google.com/advancedprotection/

[ Parent | on HN ]
Re:Web 2.0 sucks sharp pebbles and canal water through a dir... by justsomehnguy on Monday April 25, 2022 @03:31PM (#31159506)
It is good what they this program, but I'm just another Average Joe.

I have everything on my phone, I have 2FA on my phone, so if I lose it AND I can't restore my SIM/phone number - even knowing a prroper password for the account I can't do anything to restore the access.

And I really, really don't want to provide my government/country ID to some American company beforehand.

[ Parent | on HN ]
Re:Web 2.0 sucks sharp pebbles and canal water through a dir... by eternityforest on Monday April 25, 2022 @05:28PM (#31160895)
You just print a few recovery codes
[ Parent | on HN ]
Re:Web 2.0 sucks sharp pebbles and canal water through a dir... by justsomehnguy on Tuesday April 26, 2022 @12:32AM (#31163950)
Helps you much if you are on the other side of the country. Even better if you in another country. Do you know the phone number of any of your family/relative? Would they believe what the request for some money because you lost everything from [email protected]?
[ Parent | on HN ]