3 ms·
> with decently configured 2FA, the attacker gets a single session not really. the telecom and/or email provider are still in full possession of MITM'ing your
by cnst 11y ago
> with decently configured 2FA, the attacker gets a single session
not really. the telecom and/or email provider are still in full possession of MITM'ing your authentication credentials