News for hackers. Stuff that matters.

A comment on The "email is authentication" pattern. Parent comment

Re:The "email is authentication" pattern by firesteelrain on Sunday September 08, 2024 @01:19PM (#41481644)
This isn’t the safe to rule all safes. You have other mitigating factors like access control.

If you have state level actors physically breaking into your facilities then we might be at war

[ Parent | on HN ]
Re:The "email is authentication" pattern by tasuki on Sunday September 08, 2024 @02:24PM (#41482083)
If you have enough books (which doesn't even have to be that many), it's much better to store your secrets in one or more of the books.
[ Parent | on HN ]
Re:The "email is authentication" pattern by firesteelrain on Sunday September 08, 2024 @04:19PM (#41482878)
Yea but you have multiple pieces of the secret to restart your Vault instance. Now you need to go to everyone’s office or home to get this secret to restore it.

I am referring to Shamir algorithm that Vault uses

[ Parent | on HN ]