2 ms·

How would this protect against phishing?

• jedberg 10y ago
  It's not super clear from the writeup, but a big part of it is providing security notifications to users. So when a backend system detects what looks like a suspicious account access, it can notify the user and ask them to confirm their action. If they say, "I didn't do this" than their account can be immediately locked down until the issue is resolved by talking to a person.