News for hackers. Stuff that matters.

A comment on The "email is authentication" pattern. Parent comment

Re:The "email is authentication" pattern by throwaway290 on Sunday September 08, 2024 @08:35AM (#41480033)
Either shuffling those keys stored in N different deposit boxes is overly complicated for a normal person, or it is not overly complicated for a moderately dedicated baddie either
[ Parent | on HN ]
Re:The "email is authentication" pattern by Djdjur7373bb on Sunday September 08, 2024 @12:41PM (#41481379)
Unless the "baddie" in this case is the government, why would it be easy for anyone to obtain access to multiple secrets stored in multiple boxes/banks?

Multisig is a pretty common setup for crypto and there is software that makes it easier.

[ Parent | on HN ]
Re:The "email is authentication" pattern by throwaway290 on Monday September 09, 2024 @10:35AM (#41488938)
Can you show how it can be easy to use in normal life for a regular person and at the same time really difficult for the attacker?:)
[ Parent | on HN ]