this post was submitted on 14 Oct 2026
132 points (75.0% liked)

Privacy

51480 readers
275 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 7 years ago
MODERATORS
 

A rebuttal to an anti-passkey, pro-TOTP post that has made the rounds on Lemmy as well.

you are viewing a single comment's thread
view the rest of the comments
[–] SupraMario@lemmy.world 9 points 5 days ago (1 children)

The problem is that if they're getting phished with TOTPs then they'll walk through a scammer over the phone to let them access their accounts other ways.

You can put all the security in place all you want but 99% of breaches aren't coming from red team actors "hacking" into a system. It's way easier (and even moreso now with LLMs able to do robo calls with human sounding voices) and get Brian from accounting to give up his shit...or even the CEO to give up his.

I've seen it all, they willfully will give over their access because they're dumb as fuck.

[–] orochi02@feddit.org 3 points 5 days ago (1 children)

Can we Not Act like only idiots can get phished? Nobody is Safe, especially when the phishing attempt is incredibly convincing

[–] SupraMario@lemmy.world 4 points 5 days ago

Most of the people who get phished, are not educated enough to avoid it. They don't want to be, because computers are just supposed to work and not be something they need to learn.

If you're educated and ask questions vs just assuming everything is legit and giving away everything they ask for then you realize quickly that phishing is not as convincing as you're making it out to be.