News for hackers. Stuff that matters.

A comment on 49% of workers, forced to change passwords, reuse same one with minor change. Parent comment

Re:49% of workers, forced to change passwords, reuse same on... by iudqnolq on Friday December 13, 2019 @11:11PM (#21787751)
Google does that without needing a QR code if you have a recent Android and haven't enabled 2FA
[ Parent | on HN ]
Re:49% of workers, forced to change passwords, reuse same on... by nicky0 on Saturday December 14, 2019 @02:14AM (#21788259)
How does the communication from the computer to the phone work?
[ Parent | on HN ]
Re:49% of workers, forced to change passwords, reuse same on... by iudqnolq on Saturday December 14, 2019 @02:17AM (#21788268)
No idea. Presumably a push notification. Within less than a second providing your email (on fast US data) you get a prompt on your phone that shows the browser model and approx location and asks you to approve or disapprove the login.

They initially rolled it out as a 2FA option, then as an optional for 1FA.

[ Parent | on HN ]
Re:49% of workers, forced to change passwords, reuse same on... by nicky0 on Sunday December 15, 2019 @01:47AM (#21794870)
OK so you have to actually type your email into the computer.
[ Parent | on HN ]
Re:49% of workers, forced to change passwords, reuse same on... by iudqnolq on Sunday December 15, 2019 @01:57AM (#21794897)
Exactly. Google already asked for email alone and then password on the next page so that they could support sending enterprise emails to custom login systems.
[ Parent | on HN ]