News for hackers. Stuff that matters.
Re:1Password and 2FA: Is it wrong to store passwords and one... by jackweirdy on Saturday July 06, 2024 @06:54AM (#40889592)
> - Eavesdropping on you, doesn't happen because you use the password manager's autofill.

I rate this more likely and it’s one reason I still use TOTP stored in the same place as the password for other services.

A lot of sites are susceptible to cdn JavaScript compromises, and at least with TOTP stored in the same place as the password, a password replay attack has a very tight window of usability

There are no comments on this comment yet.