pitninja

joined 1 year ago
[–] pitninja@lemmy.ml 3 points 5 months ago

That may have been part of the reason, but the theory behind MFA is that there are 3 primary ways to authenticate who you are: what you know (password), what you have (secure one time password generator or hardware token), and what you are (biometrics). Password managers and digital one time password generators have kind of blurred the lines between passwords and one time passwords, but you're raising your risk a bit if you put them in the same place.

[–] pitninja@lemmy.ml 1 points 5 months ago* (last edited 5 months ago)

That's probably true, but if the satire is annoying in its own right, I'm not going to indulge it either lol

[–] pitninja@lemmy.ml 7 points 5 months ago (4 children)

Even if I hosted my own BitWarden vault, I wouldn't put my passwords and 2 factor tokens in the same place because it's eliminating the benefits that 2 factor provides if someone somehow manages to get into my vault.

[–] pitninja@lemmy.ml 3 points 5 months ago* (last edited 5 months ago) (2 children)

Exactly, from a security perspective, it's a bad idea to put 2 factor tokens together with your passwords. You effectively eliminate the security benefit that 2 factor provides if you do because if people get into your password manager, they have everything they need to access your accounts. The only people it "helps" having it all in one app are people who don't understand the purpose of 2 factor and just see it as an inconvenience when services force it on them. Even though I use BitWarden for passwords, I don't think that I'll be changing from Aegis to BitWarden's stand-alone authenticator because Aegis is doing its job nicely.

[–] pitninja@lemmy.ml 1 points 1 year ago

Reddit died for y'all's sins.

[–] pitninja@lemmy.ml 4 points 1 year ago (1 children)

Yeah and captcha got yanked out again. I understand they needed to get it out the door, I just don't see the argument for removing captcha when it appeared to be doing at least some good in preventing bots 🤷

[–] pitninja@lemmy.ml 3 points 1 year ago (3 children)

v0.18 final was released pretty much as you were commenting in here.

[–] pitninja@lemmy.ml 3 points 1 year ago

I think it's a "no for now", but Ruben has reserved a community over here just in case.

[–] pitninja@lemmy.ml 1 points 1 year ago

I didn't repeat myself on the second point. Either one's politics endorse intellectual property rights, which include the rights of an individual or organization to permit/limit any or all of those specific facets I mentioned previously according to their preference or one does not believe intellectual property rights exist. That's the only meaningful way I can conceive of software licenses being a political concept, but I'm welcome to hear your take.

[–] pitninja@lemmy.ml 2 points 1 year ago

This sounds like one of those deals where the picture orientation is being determined by metadata that may be getting stripped when you post. I would file an issue on GitHub and include a sample image, if possible.

view more: next ›