News for hackers. Stuff that matters.

A comment on Phishing attack against Lastpass. Parent comment

Re:Phishing attack against Lastpass by redwards510 on Saturday January 16, 2016 @08:04PM (#10917730)
I think you may be wrong about #3. The author argues that anyone with 2factor turned on will NOT receive email notification, and I'm not sure what you mean by geographic restriction. You can disallow Tor IPs but that is about it.
[ Parent | on HN ]
Re:Phishing attack against Lastpass by chrisfosterelli on Saturday January 16, 2016 @08:11PM (#10917759)
Sorry, you're right that 2FA accounts will not receive the email. I've updated my comment.

In addition to the TOR IP block, you can also restrict it to only allow access from select countries. This is what I meant by geographic restriction.

[ Parent | on HN ]