5 ms·
The attack was on a phone call message for 2-factor authentication "Your one time password is XXXXXX. Please use this to login now" not an RSA token.
by pilom 14y ago
The attack was on a phone call message for 2-factor authentication "Your one time password is XXXXXX. Please use this to login now" not an RSA token.
- neilc 14y agoI believe the OP is referring to http://www.finextra.com/news/fullstory.aspx?newsitemid=22375 http://www.finextra.com/news/fullstory.aspx?newsitemid=22375
- Legion 14y agoThe point of multi-factor authentication is not that the additional factors are infallible. Rather, the point is, when one factor fails, there remain other factors still in place. When RSA was compromised, accounts in which RSA was used as an additional factor remained protected by their remaining uncompromised factors - allowing time to replace the RSA factor.