CISA: Do not use SMS as a second factor for authentication [pdf]

Re:CISA: Do not use SMS as a second factor for authenticatio... by presoak on Friday December 20, 2024 @11:13AM (#42472327)

Interesting that they mention LastPass and not Bitwarden in the password manager section.

[ Parent | on HN ]

Re:CISA: Do not use SMS as a second factor for authenticatio... by hack_katz on Friday December 20, 2024 @12:08PM (#42472791)

The cynic in me supposes that's because they have backdoor access to LastPass and not to bitwarden. Actually, LastPass keeps getting hacked so I just about expect it to be the case.

[ Parent | on HN ]

Re:CISA: Do not use SMS as a second factor for authenticatio... by hooverd on Friday December 20, 2024 @02:09PM (#42473894)

Or 1Password! They're doing neat things with Nitro enclaves.

[ Parent | on HN ]

Re:CISA: Do not use SMS as a second factor for authenticatio... by snapplebobapple on Saturday December 21, 2024 @10:05PM (#42484117)

What is a nitro enclace?

[ Parent | on HN ]

Re:CISA: Do not use SMS as a second factor for authenticatio... by hooverd on Tuesday December 24, 2024 @01:34PM (#42503843)

They're AWS's attempt at a trusted execution environment. So your secrets are decrypted there with slightly more assurance that the platform can't snoop on them.

[ Parent | on HN ]