6 ms·
From what I understand, the SMS verification was bypassed but not the password validation. I am probably not understanding this correctly, but if the attacker
by IceWreck 5y ago
From what I understand, the SMS verification was bypassed but not the password validation.
I am probably not understanding this correctly, but if the attacker had to have knowledge of your password then why did they reimburse affected users. They could've called it a day and claimed it was the user's fault.