This new authentication method offered by Yahoo looks awkward, from both user experience and security point of view:
1. User experience – keying in one time password each time I want to log in – is this the solution? Copy/Paste from KeePass is much more convenient.
2. Security – yes, it is single factor, and it is ugly factor because anyone who can either steal or borrow for just 2 minutes your phone now can access your account. Password only is ugly as well, so only combination of two factors provides some reasonable level of protection.
1. User experience – keying in one time password each time I want to log in – is this the solution? Copy/Paste from KeePass is much more convenient.
2. Security – yes, it is single factor, and it is ugly factor because anyone who can either steal or borrow for just 2 minutes your phone now can access your account. Password only is ugly as well, so only combination of two factors provides some reasonable level of protection.
RSS Feed
