Re:Operation Luigi: How I hacked my friend without her noticing
by EGreg on Thursday August 03, 2017 @02:21PM
(#14922232)
How would you phish 2FA "at the same time"?
[ Parent
| on HN ]
Re:Operation Luigi: How I hacked my friend without her noticing
by albertgoeswoof on Thursday August 03, 2017 @02:31PM
(#14922340)
You ask for the token as well and login with it at the same time.
It'll trip you up later if it asks again (e.g. When changing a password or setting up mail forwarding) but your session cookie will be valid for quite some time.