News for hackers. Stuff that matters.
Re:Magic/tragic email links: don't make them the only option by matt-p on Wednesday January 08, 2025 @02:45PM (#42637732)
It's not about 'liking' magic links;

That means you've got all the security weaknesses of a magic link, and the added weaknesses of password reuse and weak passwords.

Is objectively true. I don't really 'like' magic links but I think they're a very easy to implement and simple to use for infrequently accessed systems. Arguably easier than user/pass and certainly more secure.

There are no comments on this comment yet.