News for hackers. Stuff that matters.
Re:We Got Phished by shelbyfinally on Monday October 24, 2016 @03:43PM (#12782132)
It's Yubikey.

Google Authenticator doesn't do any kind of push notification when you log in. Each endpoint uses a shared secret (the server and the mobile app share that secret beforehand) to generate a time-limited code.

Re:We Got Phished by ryanobjc on Monday October 24, 2016 @04:26PM (#12782551)
Actually I was talking about another method:

http://lifehacker.com/google-prompt-lets-you-use-two-factor-...

Essentially its like 2 factor auth, except you arent conveying codes from your phone to the computer.

This is a nice feature because it is a lot more user friendly than normal 2fa, it's free if you have a smart phone and well, it works.

Re:We Got Phished by kbar13 on Monday October 24, 2016 @03:50PM (#12782215)
op isn't talking about totp, it's the push notification you get when you log in on a new device (the "review your recent login" notification)
Re:We Got Phished by askmike on Monday October 24, 2016 @03:57PM (#12782275)
op is talking about "Google prompt".

See here: http://arstechnica.com/gadgets/2016/06/googles-new-two-facto...

Re:We Got Phished by kbar13 on Monday October 24, 2016 @05:40PM (#12783157)
oh nice, that's even better