News for hackers. Stuff that matters.

A comment on Cryptopathic: The situation at LastPass may be worse than they are letting on. Parent comment

Re:Cryptopathic: The situation at LastPass may be worse than... by zmmmmm on Saturday December 24, 2022 @12:28AM (#34114265)
> In particular, I don't see how 2FA is possible with this

You can use anything that integrates with GPG ... eg: you can do it with a Yubikey [0]

[0] https://support.yubico.com/hc/en-us/articles/360013790259-Us...

[ Parent | on HN ]
Re:Cryptopathic: The situation at LastPass may be worse than... by eternityforest on Saturday December 24, 2022 @06:09AM (#34115819)
Ah, I stand corrected, I forgot about trusted hardware based 2FA.

Still, it doesn't allow SMS or email based 2FA as far as I can tell, since that involves a trusted server and doesn't mean anything in a trustless model where the server owner could just add a bypass.

[ Parent | on HN ]