teslademigod1

8 ms·

1. 61.▲
   by teslademigod1 7y ago

   also - this image: https://cybernews.com/wp-content/uploads/2020/02/security-ch... looks like it's not email as the second factor, but your device via SMS
2. 62.▲
   by teslademigod1 7y ago

   In the forbes article cited above, the author says that cybernews showed it to him: "CyberNews claims—and the company showed me a demonstration—that it can successfully login to an account using basic credentials on a new computer. &qu
3. 63.▲
   by teslademigod1 7y ago

   reading both, looks to me like this is pretty much 2fa. isn't 2fa defined as a "second factor" beyond user:pass? isn't that what this bypass is about?
4. 64.▲
   by teslademigod1 7y ago

   hmm yes, I see your point
5. 65.▲
   by teslademigod1 7y ago

   but this is it: "This happened even when the issue was eventually patched..." which, based on that, I understand their gripe here
6. 66.▲
   by teslademigod1 7y ago

   not sure: https://www.hackerone.com/blog/Getting-to-know-the-HackerOne... "When they aren’t triaging reports on our platform, they are spending time on their own bug bounty hunts."
7. 67.▲
   “We found PayPal vulnerabilities and PayPal punished us for it”(cybernews.com)

   980 points by teslademigod1 7y ago|328 comments
8. 68.▲
   PayPal ‘Critical’ Login Hack: New Report Warns You Are Now at Risk from Thieves(forbes.com)

   2 points by teslademigod1 7y ago|0 comments
9. 69.▲
   Google Is Partnering with WordPress to Develop a News Publishing Platform(searchenginejournal.com)

   3 points by teslademigod1 8y ago|1 comments