2 ms·
Well put two and two together. They record key strokes and HTTPS URLS. If I go to gmail.com and type in z a c h a y s a n [CLICK ONTO OTHER FORM FIELD] m y p a
by 3pt14159 15y ago
Well put two and two together. They record key strokes and HTTPS URLS.
If I go to gmail.com and type in z a c h a y s a n [CLICK ONTO OTHER FORM FIELD] m y p a s s w o r d
Then they have access to my data. Period.
This is why two step authentication is so important.
- Cyranix 15y agoSomehow I don't think that doing a secondary authentication over SMS would help much in the scenario you're outlining.
- 3pt14159 15y agoIt would, because they wouldn't just be able to passively log in, they would have to enter the password, reroute the sms (so that I didn't see it) and then log in to the email system (which is recorded on "this account was last accessed at").