3 ms·
> The report highlighted that there was a five-day window of time between January 16-21, 2022, where an attacker had access to a support engineer’s laptop. This
by duncan-donuts 5y ago
> The report highlighted that there was a five-day window of time between January 16-21, 2022, where an attacker had access to a support engineer’s laptop. This is consistent with the screenshots that we became aware of yesterday.
Yeah, it was.
- djrogers 5y agoYou can take my laptop from me and have access to it without having compromised my Okta account. In that scenario you wouldn't have my okra password or my MFA - what you would have is transient access to everything I'd already auth'd to until it times out and requests that you auth again.
- lIIIllllIIII 5y agoAt which point your browser probably auto-fills the credentials again :-)
- d3nj4l 5y agoBut ideally you would have MFA on a second device, so just the credentials aren't enough.