4 ms·
Service providers have an obligation to mitigate credential stuffing. Zoom failed to do so. They should use MFA but at the very least they should prohibit the
by all_blue_chucks 7y ago
Service providers have an obligation to mitigate credential stuffing. Zoom failed to do so.
They should use MFA but at the very least they should prohibit the use of leaked passwords.
- thanksforfish 7y agoEach service provider needs to balance security and convenience based on the market they serve. Forced MFA for a product designed to be an easy to use video conferencing tool feels incorrect.
- all_blue_chucks 7y agoI disagree. Even the weakest form of MFA (click this link sent to your email to set an authorization cookie) prevents stuffing attacks, and is still available to anyone.
- deleted 7y ago[deleted]