4 ms·
It mitigates phishing and password reset attacks. It also means you can give access to some account to a friend or family over the phone one time, without givin
by sametmax 7y ago
It mitigates phishing and password reset attacks. It also means you can give access to some account to a friend or family over the phone one time, without giving them permanent access. Also good on non encrypted public wifi or in a company network with a proxy that sees and logs everything.
The real word is very unperfect.
- goatsi 7y agoIt mitigates the simplest forms of phishing. If someone is running a proxy server[0] and passing everything along to the real website, token (or SMS) based 2fa can't do anything. [0]https://breakdev.org/evilginx-2-next-generation-of-phishing-2fa-tokens/ https://breakdev.org/evilginx-2-next-generation-of-phishing-...
- sametmax 7y agoHence "mitigates" and not "cancels"
- deleted 7y ago[deleted]