this post was submitted on 28 Feb 2025
553 points (93.5% liked)

memes

16673 readers
3363 users here now

Community rules

1. Be civilNo trolling, bigotry or other insulting / annoying behaviour

2. No politicsThis is non-politics community. For political memes please go to !politicalmemes@lemmy.world

3. No recent repostsCheck for reposts when posting a meme, you can only repost after 1 month

4. No botsNo bots without the express approval of the mods or the admins

5. No Spam/Ads/AI SlopNo advertisements or spam. This is an instance rule and the only way to live. We also consider AI slop to be spam in this community and is subject to removal.

A collection of some classic Lemmy memes for your enjoyment

Sister communities

founded 2 years ago
MODERATORS
 
you are viewing a single comment's thread
view the rest of the comments
[–] Engywuck@lemm.ee 12 points 5 months ago (1 children)

Why would I want security based on a device? What security this offers greater than a 64 chars password + 2FA?

[–] Natanael@infosec.pub 3 points 5 months ago (1 children)

TOTP codes can be phished, hardware security keys and passkey can't

[–] Engywuck@lemm.ee 0 points 5 months ago (1 children)

I doubt that anyone that doesn't use "password" as a password and who knows what 2FA is could be easily subject to phishing.

[–] Natanael@infosec.pub 3 points 5 months ago

It literally just takes a slightly different domain name. Lots of infosec pros have been phished when not paying attention