News for hackers. Stuff that matters.

A comment on Why don’t we do email verification in reverse?. Parent comment

Re:Why don’t we do email verification in reverse? by ipaddr on Sunday August 21, 2022 @09:31AM (#32540008)
Your single point will be compromised. Someone gets access to your system they now have access to all of your passwords. Your password manager is hacked. Your device dies. Putting your eggs in one basket feels like a smart thing until you lose that basket.
[ Parent | on HN ]
Re:Why don’t we do email verification in reverse? by speedgoose on Sunday August 21, 2022 @10:38AM (#32540620)
I agree it’s not perfect but what is your better solution? My email and some passwords have been collected at least 8 times according to https://haveibeenpwned.com/

A password manager with multiple factor authentication sounds better to me.

[ Parent | on HN ]
Re:Why don’t we do email verification in reverse? by ipaddr on Sunday August 21, 2022 @12:19PM (#32541636)
The different email address per service approach fixes that issue and provides additional privacy when your data is sold to bulk data resellers.
[ Parent | on HN ]
Re:Why don’t we do email verification in reverse? by eptcyka on Sunday August 21, 2022 @06:34PM (#32545184)
My password manager can only decrypt my passwords via my yubikey. What now?
[ Parent | on HN ]