4 ms·
No, this is different. They're not exploiting insecure SMS. 2fa apps appear to be vulnerable, but FIDO keys are secure. In theory, there’s little reason the t
by panarky 8y ago
No, this is different. They're not exploiting insecure SMS.
2fa apps appear to be vulnerable, but FIDO keys are secure.
In theory, there’s little reason the technique shouldn’t work against Google Authenticator and other 2fa apps that either transmit a one-time password or ask people to click an approval button.