submitted 2 years ago* (last edited 2 years ago) by to c/technology@lemmy.world
 

I just got the email from haveibeenpwned. F Trello.

you are viewing a single comment's thread
view the rest of the comments
[–] 1 point 2 years ago (2 children)

Physical token over TOTP authenticator?

  • source
  • parent
  • hideshow 2 child comments
  • [–] 2 points 2 years ago

    all the root secrets are available in plain text the generator app at some point, they have to be. moving that to a single purpose device greatly reduces the risk of vulnerabilities in your phone leading to exfiltration via internet connection

  • source
  • parent