Hacker News Reader

So - the moral of the story is to never use Windows?

Or don’t use their „security“ features. AFAICT everything would have been fine if they used a hardware key as second factor.

How do you know which app is accessing your hardware key in the absence of any OS feature mediating access to it?