2 ms·

Technical solutions can always be defeated by social engineering. Training is supposed to prevent that.

• isbvhodnvemrwvn 6y ago
  How do you socially engineer someone to compromise their U2F-based dongle?
  • tantalor 6y ago
    "Hi I'm from tech support, I need you to go and generate some new backup codes. Now read them to me. Thanks!"
  • kerng 6y ago
    When U2F is widely used, there will be more social engineering tricks - like, visit this attacker website or download this tool/browser extension, put cursor in box, now please touch your key to verify your identity. Countless creative ways will be tried and discovered.