News for hackers. Stuff that matters.

A comment on 2FA or Not 2FA. Parent comment

Re:2FA or Not 2FA by autoexec on Thursday March 20, 2025 @01:05PM (#43425831)
> Oh dear. The issue isn’t the brute force, it’s that the online services leak and get cracked. And in an instant a single script takes the newly discovered username password combo and starts hammering it into the top 10000 websites, all within moments of the leak data becoming available.

This is only ever a problem if your password is reused. Don't reuse passwords and if some website is hacked and they were storing your password in plaintext you just have to reset your password (the same way everyone else does, 2FA or not)

[ Parent | on HN ]
Re:2FA or Not 2FA by c22 on Thursday March 20, 2025 @01:55PM (#43426586)
Also don't re-use email addresses.
[ Parent | on HN ]
Re:2FA or Not 2FA by robertlagrant on Thursday March 20, 2025 @04:53PM (#43428836)
> This is only ever a problem if your password is reused

That is the context of the reply, although I think they misread the article.

[ Parent | on HN ]
Re:2FA or Not 2FA by evolve2k on Sunday March 23, 2025 @01:45AM (#43451105)
The larger problem is when your password gets hacked for whatever reason that the MFA protects your account.

Anyone else here had friends have their say Instagram account hacked, none ever have MFA on and it causes great distress.

MFA IS a good idea for multiple reasons.

[ Parent | on HN ]
Re:2FA or Not 2FA by sam_lowry_ on Sunday March 23, 2025 @04:04AM (#43451503)
MFA is bad idea for as many reasons if not more: complexity of implementation, variety, digital sovereignty... to name a few.
[ Parent | on HN ]