News for hackers. Stuff that matters.

A comment on Facebook hacker beat my 2FA, bricked my Oculus, and hit the company credit card. Parent comment

Re:Facebook hacker beat my 2FA, bricked my Oculus, and hit t... by ianburrell on Friday August 20, 2021 @04:03PM (#28250765)
U2F/WebAuthn doesn't use six digit codes. You plug in USB key, press button on top of key, and browser does exchange with key and passes result to site.

The exchange between browser and key includes the domain of the site. It only works on the same site where registered the key.

[ Parent | on HN ]

There are no comments on this comment yet.