3 ms·
Maybe I have 2 factor authentication set up wrong or am missing something but here is what I have just noticed. I ran teamviewer on 2 computers. The teamviewe
by barking 10y ago
Maybe I have 2 factor authentication set up wrong or am missing something but here is what I have just noticed.
I ran teamviewer on 2 computers.
The teamviewer windows appear.
On neither instance do I log into my teamviewer account, so I don't enter my account password and therefore I don't enter a 2FA code from my phone.
However I can still open a session from one computer to the other using either the random password or the stored computer-specific password.
So how exactly does 2FA increase my protection from the alleged scam?
- Sacho 10y agoThe 2FA authentication is only useful if you whitelist your account. The default settings, just as you mentioned, allow anyone to access your computer should they somehow guess the random password. My guess is that the hackers have found a way to acquire these random passwords, or are simply brute forcing them on a massive scale and we're seeing reports of the minority of successes.
- barking 10y agoThanks I get it now. It would be interesting to know if the chap who reported being connected to, with 2FA on, had restricted access via the whitelist or had left it the way mine was. I suspect the latter. However I am so paranoid at the moment that I have decided to exit teamviewer completely between uses until this all blows over. EDIT: In the comments below the linked article is the best explanation yet in my opinion: >They sign into the website/client with the compromised credentials, and get a list of what computers are online and waiting for connections from that account. http://arstechnica.com/security/2016/06/teamviewer-users-are-being-hacked-in-bulk-and-we-still-dont-know-how/?comments=1&post=31311071&mode=quote http://arstechnica.com/security/2016/06/teamviewer-users-are...