2 ms·
How is it possible to have compromised password but not compromised the second factor? I don't understand the theory of leaking not enough factors. What is stop
by eimrine 1y ago
How is it possible to have compromised password but not compromised the second factor? I don't understand the theory of leaking not enough factors. What is stopping webmasters from using 100FA?
- smsm42 1y ago> How is it possible to have compromised password but not compromised the second factor? Server-side (assuming weak password storage or weak in-transit encryption) or phishing (more advanced phishers may get the codes too but only single instance of the code, not the base key). > What is stopping webmasters from using 100FA? The users would hunt them down and beat them mercilessly?
- eimrine 11mo agoSo 2FA is a protection against the server's admin? Not even the user's protection but the webmaster's one?