News for hackers. Stuff that matters.

A comment on PayPal 2FA Bypass. Parent comment

Re:PayPal 2FA Bypass by blazespin on Sunday October 23, 2016 @02:31AM (#12772303)
17 days is fast, relatively speaking.

Security questions are hardly really that great of 2FA protection anyways.

[ Parent | on HN ]
Re:PayPal 2FA Bypass by ryanfreeborn on Sunday October 23, 2016 @02:36AM (#12772318)
Good to know.

And ya, a security question to bypass a phone 2SV is a joke. Almost entirely defeats the purpose.

[ Parent | on HN ]
Re:PayPal 2FA Bypass by vinay427 on Sunday October 23, 2016 @03:09AM (#12772399)
Just to be clear, it bypasses any of their 2FA codes, not just SMS-based codes. The security questions bypass "feature" also appears on my account for which I use a VeriSign 2FA dongle.
[ Parent | on HN ]