News for hackers. Stuff that matters.
Re:Disabling Google 2FA doesn't need 2FA if you're already l... by CodesInChaos on Friday July 10, 2020 @12:51PM (#23793478)
I don't think there is a way around "displaying that purpose on the trusted 2FA device." if you want to protect against a compromised computer.

Domain binding protects you from fishing, but still relies on the user's computer, including the browser, being secure. So it doesn't help here.

There are no comments on this comment yet.