News for hackers. Stuff that matters.

A comment on Phishing Attacks via Google translate. Parent comment

Re:Phishing Attacks via Google translate by thefounder on Friday February 08, 2019 @03:19PM (#19118260)
The passwords are broken. Anyone can fall for it regardless of how experienced he/she is. It's just a matter of time/opportunity. We need u2f
[ Parent | on HN ]
Re:Phishing Attacks via Google translate by Andre607 on Friday February 08, 2019 @06:16PM (#19119570)
> We need u2f

U2F is not immune to phishing attacks, at least not if backup codes are being used: https://youtu.be/rPTI9e-9tBE?t=936

[ Parent | on HN ]
Re:Phishing Attacks via Google translate by thefounder on Saturday February 09, 2019 @02:35AM (#19121207)
Then let's not use backup codes. If you loose your auth device then you should recover it using an office of authentication (i.e https://travel.state.gov/content/travel/en/legal/travel-lega...)
[ Parent | on HN ]