Re:Google: Security Keys Neutralized Employee Phishing
by SpaethCo on Monday July 23, 2018 @12:48PM
(#17593946)
They got around 2FA over SMS because a number of services like GMail offered password reset via SMS as well as 2FA over SMS.
It was the password reset process that was the most vulnerable, and strangely the part that kept getting glossed over when people reported on the takeover incidents.
It was the password reset process that was the most vulnerable, and strangely the part that kept getting glossed over when people reported on the takeover incidents.