News for hackers. Stuff that matters.
Re:Facebook hacker beat my 2FA, bricked my Oculus, and hit t... by krastanov on Friday August 20, 2021 @04:37PM (#28251118)
You misread that statement and the excerpt you copied completely changes its meaning if you remove the surrounding. Read it as:

"U2F/WebAuthn is secure because it does origin binding which is not phishable, unlike entering a TOTP or a code from your hardware token or authenticator app or SMS"

Putting the original parenthetical in between the start and end of the main clause definitely makes it easy to misread. I just moved the parenthetical to the end of the sentence.

There are no comments on this comment yet.