The problem with passwords is like what we’ve got in this story. They get stored somewhere. And if they get stored in plain text, or even encrypted if there’s a large enough quantity of data, they can be stolen. Also they get transmitted from your browser to the server, and if that happens in plain text they can be stolen. And you have to type them in and if somebody got a keystroke logger on your machine they’ve got your password.
That’s the big benefit of the token system, it doesn’t matter if gets stolen. Since that token is only useful for your machine for about an hour everybody in the world could get your token, it does them no good.
i heard that tiktok was snooping the clipboard
i also heard that President Biden has lifted the ban on using tiktok while calling for an investigation into spyware apps.
“That’s the big benefit of the token system, it doesn’t matter if gets stolen. Since that token is only useful for your machine for about an hour “
I’m in over my head here but could we say that it’s good as long as your email address can’t be spoofed?