3 ms·
The rep can perform a password reset and/or change the sms/email pair and then attackers can do the rest and make the posts themselves.
by kevingadd 6y ago
The rep can perform a password reset and/or change the sms/email pair and then attackers can do the rest and make the posts themselves.
- dboreham 6y agoOne rep does password resets for scores of high value accounts?
- Frost1x 6y agoThere are probably other factors involved, like access to other information used for MFA and compromising those mediums or using information related to them to assume identity.
- michaelt 6y agoBefore this incident, protections against that were probably "a good idea at some point, but not near the top of the backlog right now"