• 0 Posts
  • 3 Comments
Joined 3 years ago
cake
Cake day: July 30th, 2023

help-circle
    1. Describing TOTP as a “great solution” for adding security to a password-based account. When the most common threat model on the web is phishing (a word the post never mentions!), TOTP hardly buys you anything. TOTP is phishable.

    If (after decades of awareness) you manage to get phished while using TOTP, you shouldn’t be trusted with a phone or any digital information at all