4 ms·
Fine. But by Cloudflare's own statement it didn't fail because they used webauthn, it failed because they didn't use TOTP. Think of it like a bank robber showi
by mike_d 4y ago
Fine. But by Cloudflare's own statement it didn't fail because they used webauthn, it failed because they didn't use TOTP.
Think of it like a bank robber showing up to a job to crack a safe with an autodialer. He will have no problems on 9/10 banks that use dial safes, but this one has an electronic keypad. The electronic keypad being better or worse is irrelevant, it protected the bank because the robber brought the wrong tool.
- jgrahamc 4y agoNot really. Because the hard keys are bound to the origin website it wouldn’t matter if the attacker had been aware. It still wouldn’t have worked.
- mike_d 4y agoThey also didn't try to steal eastdakota's laptop, yet you give no credit to the (I assume) perfectly good locks on his home.