3 ms·
I work in infosec, I literally write phishing sites. A good phishing site with MFA would easily fool me. How’s grandma gonna stand a chance?
by hsbauauvhabzb 5y ago
I work in infosec, I literally write phishing sites. A good phishing site with MFA would easily fool me. How’s grandma gonna stand a chance?
- tialaramex 5y agoWebAuthn saves granny though. Because it's so easy that granny can't get confused. The best way forward under WebAuthn is to have her physically send them her Security Key. Now, granny may not be down with the latest Tik Tok trends, but she has seen keys before, and the analogy is strong - so I think she can get this right. To be fair, scammers have been successful with scams that involve an actual bike courier (presumably the scammer or a friend) coming to pick up your bank card, but that at least feels a bit reasonable because it does say the card remains property of the bank, so, sure, have your card back. And I'm also guessing this is a much higher friction scam than the average "Phone support in India" setup. I reckon scam dozens of people for their card this way and somewhere around the 100 victims mark the guy opening the door to your courier has a baseball bat, or worse, and your courier has a bad day.