Why Nostr? What is Njump?
2024-05-03 12:08:11
in reply to

BTCFalk on Nostr: Really bad take, as if those where the recommended FAs methods Yes they are ...

Really bad take, as if those where the recommended FAs methods

Yes they are relatively easy to compromise and they don't protect your privacy...
*still a lot more secure then just a Password; especially because most people use bad passwords, also because most people don't really understand what makes a secure PW, the usual PW requirements and "security ratings" arn't sufficient to make a good PW
*2FA isn't ment for protecting your privacy, in most cases the privacy is lost in way before in 50 other ways, but i there are other 2FA ways that don't compromise you

The lower barrier to entry 2FA wich is safer and also more convenient is through Authenticator app

The next step would be a phisical security Key (for example a yubikey) witch is on a completely other level of Security and onece you got used to it convenience
The downside is it costs (between $25-110 depending on what features &form factor you need)

But on top of just using any form of 2FA anyone that doesn't already use a PW Manager would 100% benefit from starting to use one

For now the combination of a decent PWM and a 2FA Authentication App is probably sufficient for most people, would make they're online easier and a lot more secure, wile probably reduceing a lot of hacks and frauds

In the future it'll probably get worse, so a PWM for "passkeys" (a "new" form of "password" witch basically is a digital signature exchange) and a physical security key will be necessary, at least for high stakes things
Author Public Key
npub1p7f90v28yafu83vvdpppvtyyzsv2pkssxzejd39a4vnrz5vchmsq26kj93