2 ms·
> If a user is willing to give their email and password to a phishing site... > The phisher can't click the links, because they don't have access to the user's
by saurik 4y ago
> If a user is willing to give their email and password to a phishing site...
> The phisher can't click the links, because they don't have access to the user's email.
Something here doesn't add up.
- alexchamberlain 4y agoA phisher can have access to a victim's email address without have access to their emails.
- saurik 4y agoOh, I hadn't read that as merely having the e-mail address and password to the site, but having the password to the e-mail account. I get it now. Though, it still irks me that we are now up to 3 factor authentication--password, TOTP, and e-mail--under the premise that the user is too dumb to secure 2 factors, and yet somehow is smart enough to secure the third one.