Even if I hosted my own BitWarden vault, I wouldn’t put my passwords and 2 factor tokens in the same place because it’s eliminating the benefits that 2 factor provides if someone somehow manages to get into my vault.
pitninja
Something interesting
- 4 Posts
- 48 Comments
Exactly, from a security perspective, it’s a bad idea to put 2 factor tokens together with your passwords. You effectively eliminate the security benefit that 2 factor provides if you do because if people get into your password manager, they have everything they need to access your accounts. The only people it “helps” having it all in one app are people who don’t understand the purpose of 2 factor and just see it as an inconvenience when services force it on them. Even though I use BitWarden for passwords, I don’t think that I’ll be changing from Aegis to BitWarden’s stand-alone authenticator because Aegis is doing its job nicely.
deleted by creator
pitninja@lemmy.mlto
The Onion@midwest.social•The Onion takes the shot and hits hard.English
611·2 years agoIt’s pretty low brow humor when I’ve come to expect better from The Onion 🤷
pitninja@lemmy.mlto
The Onion@midwest.social•The Onion takes the shot and hits hard.English
1219·2 years agoI’m honestly a little torn on this because I generally love The Onion and hate Mitch McConnell, but poking fun at what very likely could be a medical issue seems kind of low.
pitninja@lemmy.mlto
Labor Movement@lemmygrad.ml•The studios thought they could handle a strike. They might end up sparking a revolution
0·3 years agoThere’s a pretty wide gap between A/B listers that are household names making a guaranteed 7+ figures per role and people that fight for every small role they can get, often going weeks between roles, and often only earning SAG minimums.
pitninja@lemmy.mlto
politics @lemmy.world•Dems’ mission to stop a third-party presidential bid hits the Hill
41·3 years agoThey could scarcely have worded that title in a way that sounded more sinister.
pitninja@lemmy.mlto
Lemmy.World Announcements@lemmy.world•Lemmy.world upgraded to 0.18.1-rc.1
1·3 years agoWell, it’s gonna cause a few more unfortunately, I think, because there are definitely some bugs in 0.18.1-rc.1
pitninja@lemmy.mlto
sh.itjust.works Main Community@sh.itjust.works•Question: when is sh.itjust.works going to upgrading to v0.18.English
4·3 years agoYeah and captcha got yanked out again. I understand they needed to get it out the door, I just don’t see the argument for removing captcha when it appeared to be doing at least some good in preventing bots 🤷
pitninja@lemmy.mlto
sh.itjust.works Main Community@sh.itjust.works•Question: when is sh.itjust.works going to upgrading to v0.18.English
3·3 years agov0.18 final was released pretty much as you were commenting in here.
pitninja@lemmy.mlto
World News@lemmy.world•LIVE: CBS confirms, debris from Titan submersible indicates rapid and catastrophic implosion. The people on board are believed to be dead.English
12·3 years agoThe 19 year old is the one I kind of feel sorry for, but he still made the decision to go down there and it’s a decision I really don’t think I would’ve made myself. But who knows 🤷
pitninja@lemmy.mlto
World News@lemmy.world•LIVE: CBS confirms, debris from Titan submersible indicates rapid and catastrophic implosion. The people on board are believed to be dead.English
2·3 years agoAnd there’s nobody to pierce the veil on and sue directly because the captain went down with the ship too.
pitninja@lemmy.mlto
Lemmy@lemmy.ml•Why do some posts and communities not show up on all instances?English
2·3 years agoIt’s pretty bad, if your instance is missing comments and posts from another instance, they’re going to be missing the comments indefinitely unless back filling is ever added to the protocol or unless users do what you’re doing to manually pull comments and posts in. I think we’ll see some federation improvements on the next major version of Lemmy after v0.18, but it’s probably going to be shitty and unreliable until then. My personal instance is basically unusable right now.
I think it’s a “no for now”, but Ruben has reserved a community over here just in case.
pitninja@lemmy.mlto
Linux@lemmy.ml•Linus Torvalds -- Creator of Linux -- defends gun regulation, woke communists, womens rights AND trans rights. Linux is political!English
31·3 years agoI actually do know what political means. Care to explain why you think software licenses are political instead of laughing at what I consider to be a completely reasonable statement?
pitninja@lemmy.mlto
Linux@lemmy.ml•Linus Torvalds -- Creator of Linux -- defends gun regulation, woke communists, womens rights AND trans rights. Linux is political!English
2·3 years agoI didn’t repeat myself on the second point. Either one’s politics endorse intellectual property rights, which include the rights of an individual or organization to permit/limit any or all of those specific facets I mentioned previously according to their preference or one does not believe intellectual property rights exist. That’s the only meaningful way I can conceive of software licenses being a political concept, but I’m welcome to hear your take.
This sounds like one of those deals where the picture orientation is being determined by metadata that may be getting stripped when you post. I would file an issue on GitHub and include a sample image, if possible.








That may have been part of the reason, but the theory behind MFA is that there are 3 primary ways to authenticate who you are: what you know (password), what you have (secure one time password generator or hardware token), and what you are (biometrics). Password managers and digital one time password generators have kind of blurred the lines between passwords and one time passwords, but you’re raising your risk a bit if you put them in the same place.