4 ms·
How does that help? If I put my credentials into a phishing site and then get a prompt on my phone to approve a login, why wouldn’t I click approve? Plus, the
by donmcronald 5y ago
How does that help? If I put my credentials into a phishing site and then get a prompt on my phone to approve a login, why wouldn’t I click approve? Plus, then the attacker often gets a cookie showing their device passed 2FA.
- ttul 5y agoThe newest authenticators make a fingerprint of your browser and use that to select a random number that they show you in the app, along with other "controls". You have to pick the correct number, which of course the attacker will not have.