On: GoDaddy Security Breach

[paulpauper]

A static password is fine if you have a good strength and rate limiting or other ways to prevent brute forcing

[vimda → paulpauper]

It's really not... Password reuse, other breaches, there's many ways a password can be leaked that isn't bruteforcing. Considering how low the barrier to entry to 2fa is, there really is no excuse these days

[1cvmask → vimda]

And the classic keyloggers which have been known to be around for over 4 decades ever since the typewriter....

https://en.wikipedia.org/wiki/Keystroke_logging#History

https://en.wikipedia.org/wiki/Keystroke_logging