2 ms·

many of the affected accounts had 2fa.

• fredoliveira 6y ago
  GP was saying "to post anything", not only to authenticate.
  • Cogito 6y ago
    Good point. This would potentially add a lot of friction for those users, but maybe that is a fine thing. Unless we hear more details, it sounds like this attack was able to get around the 2fa for the authentication, so it seems likely they could get around it for posting. Not sure how much would be added with this 2nd level 2fa.