Turn on MFA Before Crooks Do It for You

Re:Turn on MFA Before Crooks Do It for You by tonyedgecombe on Saturday June 20, 2020 @06:17AM (#23583033)

If someone manages to put software on your desktop then they have access to your password and 2nd factor.

[ Parent | on HN ]

Re:Turn on MFA Before Crooks Do It for You by the_snooze on Saturday June 20, 2020 @08:56AM (#23583679)

I mean, it's game over in pretty much any situation that your endpoints are compromised.

It's incorrect to take these measures as giving perfect security. They're efforts to greatly increase the cost for attackers. It's a pretty good improvement to increase effort from "having a password" to "having remote access to your computer."

[ Parent | on HN ]

Re:Turn on MFA Before Crooks Do It for You by tonyedgecombe on Sunday June 21, 2020 @04:35AM (#23590703)

I'd still rather they didn't have direct access to my second factor in that situation.

[ Parent | on HN ]

Re:Turn on MFA Before Crooks Do It for You by Spivak on Saturday June 20, 2020 @08:26AM (#23583563)

But that’s your phone too. The second factor, is practice, having access to an active session on your device.

[ Parent | on HN ]