• @sudneo
    link
    11 year ago

    Yeah, that’s what I said one line after. However there are also other corner cases (very unlikely) such as shoulder diving or a video recording, or people simply not using random unique passwords (for example because they chose the password before and they don’t want to rotate it). In general I agree with the principle that is not 2FA if it’s all in one place, but it’s also quite a corner case that the password manager is pwned alone (i.e., and not the target services), and in any case it’s not like not having 2FA at all.