News for hackers. Stuff that matters.
Re:Bitwarden SDK relicensed from proprietary to GPLv3 by akho on Friday October 25, 2024 @06:03AM (#41943784)
2FA via TOTP implies two things: 1) you know a password; 2) you know the seed. This is why people criticize that approach. In practice, knowing a password and having a file (seed) seem different enough, and work against some phishing threats.

Logging in through a password manager requires that you know a password (your master password), and have a file (your vault).

Re:Bitwarden SDK relicensed from proprietary to GPLv3 by KPGv2 on Friday October 25, 2024 @09:38AM (#41945165)
Or alternatively something you are (fingerprint) alongside something you have.