The closest I've ever come to falling for a Gmail phishing attack

Re:The closest I've ever come to falling for a Gmail phishin... by Jarwain on Wednesday January 11, 2017 @10:05AM (#13374356)

That requires the user to use the Duo app though, right?

I don't recall whether I had the option to use the app when I enabled MFA initially. However, after the fact, and as far as I can find, I cannot go back and enable the app.

[ Parent | on HN ]

Re:The closest I've ever come to falling for a Gmail phishin... by grivescorbett on Wednesday January 11, 2017 @10:19AM (#13374503)

That's correct, of course without having the app installed there is no option other than SMS or a hardware token.

I remember that configuring this is tricky, but I did eventually get user self enrollment configured with push being the default. Happy to dig more into my config, if you're curious: [email protected]

[ Parent | on HN ]

Re:The closest I've ever come to falling for a Gmail phishin... by Jarwain on Wednesday January 11, 2017 @10:51AM (#13374762)

Totally curious, unfortunately it'd probably go in one eye and out the other since I'm not involved in the Uni's implementation.

[ Parent | on HN ]