3 ms·Wouldn't the attacker need to be authenticated as the user of the real device for this to work?by Jarwain 10y agoWouldn't the attacker need to be authenticated as the user of the real device for this to work?