all 3 comments

sorted by: hot top controversial new old
[–] 5 points 5 months ago (1 child)

wtf how does that even happen isnt it encrypted

  • source
  • hideshow 1 child comment
  • [–] 6 points 5 months ago

    It is encrypted. Since the attack used brute force to break their 2FA somehow, they could likely use the same to guess the master password as well. Its a short read so check the article as well.

  • source
  • parent
  • [–] 4 points 5 months ago

    *smirks in KeepassXC*

  • source
  • 5 comments in c/pulse_of_truth@infosec.pub view that post
    [–] 2 points 5 months ago (1 child)

    It wasn't that long ago someone -here on lemmy- told me i was wearing a tinfoil hat for not trusting any cloud services. Everyone uses them, their focus is on the security with a bigger budged than me and are found to be safe. So now I don't have to rotate all of my passwords, I've got time to go out and buy myself a new roll, I think I earned myself a new hat today.

  • source
  • hideshow 1 child comment
  • [–] 1 point 5 months ago (2 children)

    Use a password manager, they said. It’s more secure, they said. 🙄

  • source
  • hideshow 2 child comments
  • 4 comments in c/privacy@lemmy.dbzer0.com view that post
    [–] 9 points 5 months ago (3 children)

    You mean hosting your password vault outside your control is a single point of failure?

  • source
  • hideshow 3 child comments
  • [–] 6 points 5 months ago (2 children)

    I get what you're trying to say, but hosting it in your control is still a single point of failure

  • source
  • parent
  • hideshow 2 child comments
  • [–] 2 points 5 months ago

    Technically, it's a single point of failure for you, instead of a single point of failure for thousands of people.

    A bank vault is a known target, a home safe is barely going to be visible.

  • source
  • parent