Comment on Why have so many services started using single-factor passwordless authentication in the last little while?

• FreedomAdvocate@lemmy.net.au ⁨3⁩ ⁨weeks⁩ ago

  If a thief already has your phone unlocked then nothing else matters.

  source

  • fox2263@lemmy.world ⁨3⁩ ⁨weeks⁩ ago

    There’s lots of factors for everything isn’t there. If a thief has your phone unlocked then yes you’re pretty much knackered

    source

    • FreedomAdvocate@lemmy.net.au ⁨3⁩ ⁨weeks⁩ ago

      There’s no other factors when a thief already has your phone unlocked, which is why it’s a bad point to use against passworldess authentication in this argument.

      source
• NewDark@lemmings.world ⁨3⁩ ⁨weeks⁩ ago

  Password reset?

  source

  • fox2263@lemmy.world ⁨3⁩ ⁨weeks⁩ ago

    But they don’t have access to your email in this instance.

    If the thief has your email and password and phone then you’re SOL

    source

    • NewDark@lemmings.world ⁨3⁩ ⁨weeks⁩ ago

      If they don’t have email access, why is a password less magic link bad then?

      source

      • FreedomAdvocate@lemmy.net.au ⁨3⁩ ⁨weeks⁩ ago

        The tech “enthusiasts” of Lemmy are really showing their arses in here lol. They have a “I took 2 semesters of computer science so I’m somewhat of an expert” level of understanding and mentality.

        There’s a reason most big tech companies are starting to move to passwordless logins. If 2FA is the ultimate protection about unauthorised access, the password is ultimately irrelevant - and given all we know about password reuse and data breaches, getting rid of them is a good thing.

        source
    • FreedomAdvocate@lemmy.net.au ⁨3⁩ ⁨weeks⁩ ago

      If they’ve got your phone with your 2FA they’ve also got your email on your phone lol

      source