Technology

59217 readers

2864 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each another!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago

MODERATORS

[email protected]

1053

Stop using Opera Browser and Opera GX (www.spacebar.news)

submitted 9 months ago by [email protected] to c/[email protected]

302 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 2 points 9 months ago* (last edited 9 months ago)

It's only security theater because you have this kind of mentality:

It would be slower and more inconvenient for an attacker to reset everything individually, but I'm sure they can automate that.

then I lose nothing by resetting access to the whole set of credentials via mail token, on that same assumption.

You're right that an attacker could reset everything if they had access to your primary email account, but 1) you should already have 2fa on that account to protect yourself, 2) losing access to your email would be a signal that something is wrong and gives you a chance to react before they have everything, and 3) there's a world of difference between having credentials immediately vs having to jump through hoops to reset stuff. Also:

Burning all my data makes my life a lot harder, but an attacker would barely notice.

Burning all your data means your attacker can't suddenly transfer the contents of your checking account away or buy all kinds of shit from trusted vendors just because they broke into one account. Security is about layered defense, not just giving the attacker keys to the kingdom because you couldn't remember one password.