4 ms·
They apparently think that those security questions, combined with the password, are the 2FA. Unfortunately , this is not true. 2FA authentication means someth
by Matt3o12_ 10y ago
They apparently think that those security questions, combined with the password, are the 2FA.
Unfortunately , this is not true. 2FA authentication means something that you know and something that you have. The advantage is the second one: if the attacker has compromised your PC/password wallet, they still can't get into your account because they are missing something (you have).
With UA's approach, an attacker can still successfully hijack the vicitims account if they have a key logger because UA's authentication only requires "something(s) that you know"
- oneeyedpigeon 10y agoSure, I understand what you're saying about 2FA but: > They apparently think that those security questions, combined with the password, are the 2FA. What makes you say that? I see nothing that concretely backs this up.
- dankohn1 10y agoIt's as bad as it seems. Every time you log in from a new machine, it asks for you to answer security questions, and calls it two factor, which it's obviously not.