2 ms·
What's preventing the bad guys from phishing a 2FA token on their fake login page too?
by eli 10y ago
What's preventing the bad guys from phishing a 2FA token on their fake login page too?
- jacalata 10y agoIt should make it harder because you have to run the attack based on the user interaction timing, you can't just capture and hold credentials for later.
- eli 10y agoNo doubt, but that's hardly an obstacle for an even moderately sophisticated attacker. I don't know what the magic bullet answer to phishing is, but this ain't it.