3 ms·
> Unfortunately, Mailchimp doesn't offer phishing-resistant 2FA… By no means would I encourage people not to enable 2FA via OTP, but let this be a lesson as to
by danso 2y ago
> Unfortunately, Mailchimp doesn't offer phishing-resistant 2FA… By no means would I encourage people not to enable 2FA via OTP, but let this be a lesson as to how completely useless it is against an automated phishing attack that can simply relay the OTP as soon as it's entered.
Which forms of 2FA would be resistant to the attack Troy faced?
- myrion 2y agoFIDO authenticators. If the "autofill" doesn't work, you can't be tricked into overriding it.