▲ 603 ▼ 15M Trello accounts have been leaked (lemy.lol) submitted 2 years ago* (last edited 2 years ago) by syd@lemy.lol to c/technology@lemmy.world 101 comments fedilink hide all child comments I just got the email from haveibeenpwned. F Trello.
[–] JustUseMint@lemmy.world 1 point 2 years ago (2 children) Physical token over TOTP authenticator? permalink fedilink source parent hideshow 2 child comments replies: [–] brian@programming.dev 2 points 2 years ago all the root secrets are available in plain text the generator app at some point, they have to be. moving that to a single purpose device greatly reduces the risk of vulnerabilities in your phone leading to exfiltration via internet connection permalink fedilink source parent [–] Kayel@aussie.zone 1 point 2 years ago I cannot think of a use-case outside of statecraft. Maybe companies engaged, or being engaged, in corporate espionage. permalink fedilink source parent
[–] brian@programming.dev 2 points 2 years ago all the root secrets are available in plain text the generator app at some point, they have to be. moving that to a single purpose device greatly reduces the risk of vulnerabilities in your phone leading to exfiltration via internet connection permalink fedilink source parent
[–] Kayel@aussie.zone 1 point 2 years ago I cannot think of a use-case outside of statecraft. Maybe companies engaged, or being engaged, in corporate espionage. permalink fedilink source parent