News for hackers. Stuff that matters.

A comment on The closest I've ever come to falling for a Gmail phishing attack. Parent comment

Re:The closest I've ever come to falling for a Gmail phishin... by wopwopwop on Wednesday January 11, 2017 @08:56AM (#13373861)
Not really. The phisher can just ask for the second factor the same way they ask for the password.
[ Parent | on HN ]
Re:The closest I've ever come to falling for a Gmail phishin... by angrygoat on Wednesday January 11, 2017 @09:03AM (#13373898)
U2F knocks this on the head - a MITM site won't have the secret required to generate the token.
[ Parent | on HN ]