2 ms·
The article suggests MFA as a solution, surely you just mitm the MFA entry while you're mitm'ing any other contents of a users airbnb session? (if you even need
by p1necone 8y ago
The article suggests MFA as a solution, surely you just mitm the MFA entry while you're mitm'ing any other contents of a users airbnb session? (if you even need to access actual airbnb contents for your spoof site to seem legit enough)
- mjg59 8y agoU2F prevents MITM by tying keys to the origin sites, but yes, other MFA approaches can be attacked this way.