Comment on Boffins convert typing sounds into text with 95% accuracy

Cronch@lemmy.world ⁨11⁩ ⁨months⁩ ago

• vareriu@lemmy.world ⁨11⁩ ⁨months⁩ ago

  One more reason to switch to a password manager, even though they could still find out the master password…

  source

  • qwertyqwertyqwerty@lemmy.one ⁨11⁩ ⁨months⁩ ago

    Probably still have some safety if you’re using two-factor, or have a master key in addition to a password (e.g. 1Password).

    source

    • mosiacmango@lemm.ee ⁨11⁩ ⁨months⁩ ago

      Or use a local password safe like keepass.

      source

      • rostby@lemmy.fmhy.net ⁨11⁩ ⁨months⁩ ago

        Or host it yourself like the smart one you are

        source
  • mjhelto@lemm.ee ⁨11⁩ ⁨months⁩ ago

    Only if you have to type it in to unlock your vault. Now, bear with me.

    Bitwarden (maybe others) lets you set a PIN to unlock your vault. Normally, you would think this is a less secure setup, easier to crack with the method outlined in this article. Except with Bitwarden you have to set up the pin in every browser extension and every app install.

    Meaning, unless they have access to your device, the PIN to unlock one instance of Bitwarden could be different from the PIN for another. They also don’t have to be strictly 4-digit PINs, either. I highly recommend password managers, but for my money, Bitwarden has all my love.

    Disclaimer: I am on no way affiliated with Bitwarden. But I could be if they paid me!

    source

    • noodlejetski@lemm.ee ⁨11⁩ ⁨months⁩ ago

      but then I have to remember the PIN for each one of my devices. there should be some kind of app for storing those.

      source

      • mjhelto@lemm.ee ⁨11⁩ ⁨months⁩ ago

        Do what users at most businesses do, write it on a sticky note and put it on the underside of your keyboard!

        Stick around for more tech tips with a real life sysadmin!

        source
  • Rai@lemmy.dbzer0.com ⁨11⁩ ⁨months⁩ ago

    Password manager and the LOUDEST MECHANICAL KEYBOARD POSSIBLE you have NO idea what keys I’m pressing with my blues, bitches

    source

    • dubyakay@lemmy.ca ⁨11⁩ ⁨months⁩ ago

      That’s the whole point though. The louder your keypresses the better.

      source

      • Rai@lemmy.dbzer0.com ⁨11⁩ ⁨months⁩ ago

        laptop

        I don’t think you read the article

        A loud ass mech keyboard would fuck this study up

        source
• azertyfun@sh.itjust.works ⁨11⁩ ⁨months⁩ ago

  This has been a known attack vector for years, and I wonder how no livestreamer has been (publicly) attacked in this way.

  I guess in large part this can be attributed to 2FA, passwords just aren’t worth much by themselves anymore.

  In fact the biggest attack vector I’d worry about is the infamous SMS 2FA, which is actually 1FA for password resets, which is actually 0FA “yes dear phone operator I am indeed Mister Beast please move my phone number to this new SIM”.

  source