4 ms·
You seem to be labouring under some pretty egregious misconceptions. I am not signing into something from my phone. The flow is: i try to log into gmail/google
by CamJN 6y ago
You seem to be labouring under some pretty egregious misconceptions. I am not signing into something from my phone. The flow is:
i try to log into gmail/google docs/whatever on my laptop's browser.
Google sends my phone, tablet, any other mobile device I own a notification.
if someone taps that notification, the laptop's browser is logged in, with no 2fa.
There's no such thing as a phone-wide google account on iPhones. There are google made apps, which completely fuck the security for your google account.
- joshuamorton 6y agoWhat? The phone is a second factor. The push notification is more secure than sms 2fa, the only more secure option is a yubikey, and your can disable push notifications on favor of a yubikey.