this post was submitted on 23 Jun 2025
59 points (100.0% liked)

Cybersecurity

7653 readers
122 users here now

c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.

THE RULES

Instance Rules

Community Rules

If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.

Learn about hacking

Hack the Box

Try Hack Me

Pico Capture the flag

Other security-related communities [email protected] [email protected] [email protected] [email protected] [email protected]

Notable mention to [email protected]

founded 2 years ago
MODERATORS
top 2 comments
sorted by: hot top controversial new old
[โ€“] [email protected] 4 points 4 days ago (1 children)

I get that this is a social engineering angle, but would something like a yubikey help prevent this?

I was scammed once out of my savings. it was one of those basic ass credit card fraudulent transaction scam. Can't believe I've fallen for it. so I'm pretty suspect of calls now.

[โ€“] drrodneymckay_ 3 points 3 days ago

In this case with app passwords it would not. App passwords is a feature to basically support less secure software and scenarios. The problem here is password reuse.

App passwords by design are limited to one auth method or source. Imagine a photo copier sending email. If you needed MFA for each copy and to change the password every 30-90 days, it would be a pain. So app password , longer harder password only used for the one place. But people still use easy password that they use elsewhere.