News for hackers. Stuff that matters.

A comment on Disabling Google 2FA doesn't need 2FA if you're already logged in. Parent comment

Re:Disabling Google 2FA doesn't need 2FA if you're already l... by lordlimecat on Saturday July 11, 2020 @08:25AM (#23801655)
It is easier to trick the user into starting a remote session Than it is to convince them to unlock their vault.

It's somewhat like getting someone to invite you into their home VS convincing them to open their fire safe in front of you. One of those sets off alarm bells.

[ Parent | on HN ]

There are no comments on this comment yet.