4 ms·
How can this possibly work? Even if an attacker gets the phone code, they should still need your password to sign in. How do they get past that?
by fragsworth 10y ago
How can this possibly work?
Even if an attacker gets the phone code, they should still need your password to sign in. How do they get past that?
- kinofcain 10y agoAs ams6110 noted, it's likely not a 2-factor auth attack but rather a password reset attack.