I don't use any methods other than YubiKey when I do have my keys. So attackers cannot trick me. If I see a choice without Yubikeys I immediately know I'm being phished.
2,471 karma · joined June 20, 2014
I don't use any methods other than YubiKey when I do have my keys. So attackers cannot trick me. If I see a choice without Yubikeys I immediately know I'm being phished.
They can't break most encryption with force.
These three words evoke PTSD in me as hearing it means promotion is no-go again.
Is Mozilla content with that market share? If not, it must act with the assumption that its users are average.
When Elon Musk laid off more than 80% of Twitter's workforce (or maybe 90%, the number is quickly increasing), many people said this would prove that a company needed only a handle of software engineers to be successful. If they are correct, it paints a bleak future where software engineer jobs will be forever cut down. I hope Twitter falls so it proves the reverse: a software company cannot survive without enough engineers.
While Facebook also laid people off, the percentage is much lower than Twitter. It will be even better if Facebook has to recruit people to win this battle.
I was surprised when I first learnt that you could spend money online with a VISA card by only card number, expiration date and a 3(!) digit CVV. Those are hardly secure and printed out on the card that anyone can see. Then the US merchants have so many rules about fraud detection but all of them are just heuristics with many false positives and false negatives.
When Internet companies constantly invents new methods to both increase security and usability (two step authentication, pass keys, FIDO-U2F), the payment industry in the US is just stuck in the past.
No. Your wording suggests that once attackers gain physical access, all is lost. It is not true. With a passphrase based full disk encryption, if the passphrase is strong and the machine is powered off, physical access doesn't imply data access.