Yahoo on-demand password
I'm not sure how I feel about this.
What do you all think?
Comments
-
I think the article covers it well enough. This isn't a 2FA replacement. It has the plus of lower risk server side but I higher risk of compromise client side.
I won't be using it.
0 -
From the looks you just log in with your email address and a password will be sent to your phone. So it would get really annoying having some jerk just type your email address and you get a text all the time.
0 -
@prime: Indeed. I don't know about you, but I get enough spam. :p
@RichardPayne: Even more troubling, someone getting your phone would allow them to get into your account without having to also have your password.
I like that they are at least trying, though. I guess. >_<
0 -
@brenty Besides the risk of someone getting your phone, there is also the risk of...
0 -
Wow.
0 -
I think @svondutch's post points out most is the need to prioiritise security over convenience on your email account. That account controls access to all of your other accounts and it's security is paramount.
Oh, and use authenticator apps, not texts. :)
0 -
@RichardPayne: Well, if your phone falls into the 'wrong hands' (literally, ha!) then both the authenticator app and the SMS app will be compromised. It highlights the importance of using the phone (whether through text or app) as a factor in addition to your password, rather than as a replacement for it. We certainly live in interesting times. ;)
0 -
@brenty
If your phone falls into the wrong hands, this is why (I think) it's very important to have a passcode on your phone. Sadly, I know a lot of people who don't, because "they never leave their phone unattended". They are called accidents for a reason.You're right, very interesting times we live in, I remember when I only had 3 passwords for years and thought it was safe and a good idea.
0 -
@Megan
I am shocked how many people don't have a password for their cell phone. They think "I alway have it" or "its a pain". I think it's more of a pain calling having an "oops".I also don't use a 4 PIN passcode either now, since Touch ID, no reason not to have a stronger password for your phone.
0
