Signal under fire for storing encryption keys in plaintext
Signal under fire for storing encryption keys in plaintext
Popular encrypted messaging app Signal is facing criticism over a security issue in its desktop application. Researchers and app users are raising
You're viewing part of a thread.
A password can be cracked and is often very bad.
1 0 ReplyBut that can be said of any of the other such called factors:
A yubikey can be stolen
A fingerprint can be scanned and distributed
So its not really an argument against passwords (or passkeys, or passwordless, or whatever marketing want to call them these days).
1 0 ReplyMy yubikey can be stolen but good luck guessing my PIN in the 3 to 9 tries allowed before it self destructs.
2 0 Replyluck? I have a $5* wrench.
* (Actually a $7 wrench. Inflation is murder around here.)
1 0 ReplyIf you have me... you win. My technology however will never betray me.
2 0 Reply
Most people just need to fear their passwords being cracked remotely. In masses.
If your threat model is being known, people stealing your stuff to login to your things, this is very high.
2 0 Reply