Re:“We found PayPal vulnerabilities and PayPal punished us f...
by nebulous1 on Monday February 24, 2020 @12:45PM
(#22406302)
To be clear, the extra check that is bypassed is not merely an informational message, the system sends you a message and you are supposed to have to enter something contained in that message in order to continue from that IP address/computer.
Re:“We found PayPal vulnerabilities and PayPal punished us f...
by smsm42 on Monday February 24, 2020 @02:35PM
(#22407556)
OK if it blocks login then it's at least partial 2FA for those logins. I thought it's only informational judging from the Forbes article but if it's not then it's part of the auth workflow and thus can be regarded as 2FA.
> I'd definitely call this 2-factor authentication -
You'd be misunderstanding what "authentication" means then. Notification and authentication are different things. Email is notification, not authentication. Confusing it means either not knowing what authentication is, or purposely confusing matters to present issue as something it isn't.