News for hackers. Stuff that matters.

A comment on The closest I've ever come to falling for a Gmail phishing attack. Parent comment

Re:The closest I've ever come to falling for a Gmail phishin... by crashdown on Wednesday January 11, 2017 @07:07AM (#13373355)
Must do surely. The attackers would have your email and password but wouldn't be able to login?
[ Parent | on HN ]
Re:The closest I've ever come to falling for a Gmail phishin... by slig on Wednesday January 11, 2017 @07:28AM (#13373457)
What is stopping them from showing the TFA screen and asking for you to type the number?
[ Parent | on HN ]
Re:The closest I've ever come to falling for a Gmail phishin... by JorgeGT on Wednesday January 11, 2017 @07:36AM (#13373493)
Well, Google TFA doesn't ask you to type your number (and others only some digits) so it probably would rise a red flag big enough to "awake you" from auto-pilot, I hope.
[ Parent | on HN ]
Re:The closest I've ever come to falling for a Gmail phishin... by mike-cardwell on Wednesday January 11, 2017 @08:07AM (#13373634)
I assume you're using the type of 2FA where this is not the case. We are discussing the type of 2FA where Google does ask you to enter your number. I.e, TOTP. When I log into Google, it asks me to type my 2FA number in.
[ Parent | on HN ]
Re:The closest I've ever come to falling for a Gmail phishin... by JorgeGT on Wednesday January 11, 2017 @09:08AM (#13373928)
Ah, I didn't know Google offered TOTP. I only had the option of mobile phone SMS 2FA.
[ Parent | on HN ]