Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Right. AFAICT, there's nothing inherently "specific" about the password at all, that name is mostly just a "serving suggesion" to the legitimate user (one which the attacker is free to ignore).

So calling it a "device specific password" doesn't make it any more sensible to me. I'd call it an "alternate weakest-link redundant password" to be precise, but Marketing rarely goes with my suggestions. :-)



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: