News for hackers. Stuff that matters.

A comment on Librarian's Letter to Google Security. Parent comment

Re:Librarian's Letter to Google Security by jeffbee on Monday August 01, 2022 @10:13AM (#32306216)
Well, you can see the problem, right? Allowing attackers to bypass 2FA just by saying their phone is lost makes 2FA worthless.
[ Parent | on HN ]
Re:Librarian's Letter to Google Security by nfriedly on Monday August 01, 2022 @11:43AM (#32307669)
Yeah.. but an "I don't have my phone" button that just tells people to use their phone is equally worthless.

I don't know what the right answer is, but that certainly isn't it.

[ Parent | on HN ]