News for hackers. Stuff that matters.

A comment on Multi-factor authentication isn't necessarily strong. Parent comment

Re:Multi-factor authentication isn't necessarily strong by robcohen on Saturday December 28, 2019 @12:57PM (#21900434)
This is correct, which is why I am a big fan of FIDO U2F software like https://Krypt.co . This requires your phone which is essentially a second workstation to authenticate. So now you need to exploit two workstations.
[ Parent | on HN ]
Re:Multi-factor authentication isn't necessarily strong by eeZah7Ux on Wednesday January 01, 2020 @09:42AM (#21928200)
No. Once you authenticated your sessions are the target.
[ Parent | on HN ]