News for hackers. Stuff that matters.

A comment on Bitwarden SDK relicensed from proprietary to GPLv3. Parent comment

Re:Bitwarden SDK relicensed from proprietary to GPLv3 by saint_yossarian on Friday October 25, 2024 @05:11AM (#41943538)
Not sure what you mean, it's still a second unique token that an attacker would need to know to access my account, so it's improving my security even when stored in my password manager. This was in response to grandparent's opinion that it's "at best a reduction in security".

I'm not talking about my password vault getting breached, in that case I'd be fucked either way.

[ Parent | on HN ]
Re:Bitwarden SDK relicensed from proprietary to GPLv3 by freedomben on Friday October 25, 2024 @09:50AM (#41945279)
> I'm not talking about my password vault getting breached, in that case I'd be fucked either way.

But that's the whole point. If your password vault is breached, the second factor is what prevents you from being fucked. That's why putting your seeds in the vault is a reduction in security. It may be a reduction/risk that you're willing to take for convenience, but it's still a reduction.

[ Parent | on HN ]