News for hackers. Stuff that matters.

A comment on PayPal 2FA Bypass. Parent comment

Re:PayPal 2FA Bypass by woliveirajr on Sunday October 23, 2016 @07:33AM (#12773074)
But then you (you= any person) have to consider that it'll block after some tries.

It's different from a system that never blocks passwords, security questions, and so on.

[ Parent | on HN ]
Re:PayPal 2FA Bypass by Drdrdrq on Sunday October 23, 2016 @11:19AM (#12773892)
Great, then it's a DOS attack. Unless it is limited per IP, and then it's not effective again if attacker has a botnet.
[ Parent | on HN ]
Re:PayPal 2FA Bypass by robryk on Sunday October 23, 2016 @09:14AM (#12773419)
Attacker's first attempt has a nonnegligible chance of success. Attacker can just do one attempt against one account and move to attacking a different account after each failure.
[ Parent | on HN ]