3 ms·
Hmm. Makes me wonder about the security of two factor authentication schemes. For scams like these it's pretty obvious that someone is trying to access your acc
by aaronwalker 4y ago
Hmm. Makes me wonder about the security of two factor authentication schemes. For scams like these it's pretty obvious that someone is trying to access your account, but I do wonder if there are more secure ways to verify your identity when changing account settings.
- tialaramex 4y agoIt will depend on the authentication strategy. For WebAuthn it isn't a problem, short of sending you their physical authenticator (e.g. their Yubikey, or their iPhone) they can't help you sign in as them even if they wanted to, so this makes it very hard to fool ordinary users into helping crooks.