2 ms·
> Then they log in as you Except the account in the article had two factor auth enabled. Someone triggered the second factor (a text message) then logged in wi
by Bartweiss 9y ago
> Then they log in as you
Except the account in the article had two factor auth enabled. Someone triggered the second factor (a text message) then logged in without access to it. That's the question at the heart of "how did this attack happen?"
- URSpider94 9y agoWe do not know that the attacker did not have access to the TFA code. That's an assumption. For all we know, it was the customer's roommate reading the SMS off his phone and sharing it to the pirates. It is certainly possible that Uber's TFA system is compromised, but that's not the only explanation.