Lapsus$ and SolarWinds hackers both use the same old trick to bypass MFA

Re:Lapsus$ and SolarWinds hackers both use the same old tric... by PeterisP on Wednesday March 30, 2022 @08:06PM (#30862343)

There certainly are people for whom "a full minute" is not sufficient - accessibility is important.

[ Parent | on HN ]

Re:Lapsus$ and SolarWinds hackers both use the same old tric... by ThePowerOfFuet on Thursday March 31, 2022 @01:17AM (#30864043)

If you were to tell them "wait until the code changes, then go for it", they would have thirty seconds to read and type six digits.

If this still doesn't work for them, perhaps a hardware token they can tap might be a better solution.

[ Parent | on HN ]