News for hackers. Stuff that matters.
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by ndriscoll on Friday March 29, 2024 @10:45PM (#39871390)
Browsers don't save the TOTP seed and auto fill it for you for one, making it much less user friendly than a password in practice.

The main problem I have with MFA is that it gets used too frequently for things that don't need that much protection, which from my perspective is basically anything other than making a transfer or trade in my bank/brokerage. Just user-hostile requiring of manual action, including finding my phone that I don't always keep on me.

It's also often used as a way to justify collecting a phone number, which I wouldn't even have if not for MFA.

Re:Backdoor in upstream xz/liblzma leading to SSH server com... by saagarjha on Saturday March 30, 2024 @08:43AM (#39874324)
Mine does. Yours doesn't?
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by jeromegv on Saturday March 30, 2024 @09:15AM (#39874561)
We are talking of non-SMS MFA