syd@lemy.lol to Technology@lemmy.worldEnglish · edit-210 months ago15M Trello accounts have been leakedlemy.lolimagemessage-square100fedilinkarrow-up1607file-textcross-posted to: securitynews@infosec.pub
arrow-up1607image15M Trello accounts have been leakedlemy.lolsyd@lemy.lol to Technology@lemmy.worldEnglish · edit-210 months agomessage-square100fedilinkfile-textcross-posted to: securitynews@infosec.pub
minus-squareJustUseMint@lemmy.worldlinkfedilinkEnglisharrow-up1·10 months agoPhysical token over TOTP authenticator?
minus-squareKayel@aussie.zonelinkfedilinkEnglisharrow-up2·10 months agoI cannot think of a use-case outside of statecraft. Maybe companies engaged, or being engaged, in corporate espionage.
minus-squarebrian@programming.devlinkfedilinkEnglisharrow-up2·10 months agoall the root secrets are available in plain text the generator app at some point, they have to be. moving that to a single purpose device greatly reduces the risk of vulnerabilities in your phone leading to exfiltration via internet connection
Physical token over TOTP authenticator?
I cannot think of a use-case outside of statecraft. Maybe companies engaged, or being engaged, in corporate espionage.
all the root secrets are available in plain text the generator app at some point, they have to be. moving that to a single purpose device greatly reduces the risk of vulnerabilities in your phone leading to exfiltration via internet connection