News for hackers. Stuff that matters.

A comment on Disabling Google 2FA doesn't need 2FA if you're already logged in. Parent comment

Re:Disabling Google 2FA doesn't need 2FA if you're already l... by ec109685 on Friday July 10, 2020 @09:30PM (#23798602)
Yeah, why wouldn’t the hacker wait until the user logged into their 1Password manager start stealing passwords that way?
[ Parent | on HN ]
Re:Disabling Google 2FA doesn't need 2FA if you're already l... by lordlimecat on Saturday July 11, 2020 @08:25AM (#23801655)
It is easier to trick the user into starting a remote session Than it is to convince them to unlock their vault.

It's somewhat like getting someone to invite you into their home VS convincing them to open their fire safe in front of you. One of those sets off alarm bells.

[ Parent | on HN ]