Finding vulnerable Twitter accounts with expired domains

Re:Finding vulnerable Twitter accounts with expired domains by cortesoft on Sunday August 23, 2020 @07:32PM (#24256210)

The problem is that every new source of identity added is another new attack vector. If there are 10 different ways for me to prove I am who I say I am, it only takes a security flaw in one for my account to be compromised.

[ Parent | on HN ]

Re:Finding vulnerable Twitter accounts with expired domains by Thorrez on Sunday August 23, 2020 @08:39PM (#24256591)

If you set login to require 3/10 then 3 of those ways would need a security flaw before your account is compromised.

[ Parent | on HN ]

Re:Finding vulnerable Twitter accounts with expired domains by r3muxd on Sunday August 23, 2020 @09:51PM (#24256901)

and then you'd need 3 factors just to log in, let alone any additional MFA those have

[ Parent | on HN ]

Re:Finding vulnerable Twitter accounts with expired domains by Thorrez on Tuesday August 25, 2020 @03:37AM (#24268959)

Yeah, I guess it could be inconvenient. On the other hand for many things I don't need to log in very often due to cookies keeping me logged in.

[ Parent | on HN ]