News for hackers. Stuff that matters.

A comment on Websites with fake MFA: security theater?. Parent comment

Re:Websites with fake MFA: security theater? by kobalsky on Friday July 14, 2023 @02:05PM (#36727680)
> Google has asked for a notarized copy of my ID

Very interesting. Could tell how long did it take, how was the process of recovering your account?

I'm in one of those months that I panic and wonder if I should disabled advanced protection.

[ Parent | on HN ]
Re:Websites with fake MFA: security theater? by horsawlarway on Friday July 14, 2023 @02:46PM (#36728216)
This was not for a personal account. It was recovery of a business account that was locked for session hijacking (intentional and done as part of developing a potential feature, but session hijacking none-the-less).

At the time (~2013) it triggered a complete lockout and manual verification of billing identity (notarized ID) to get back in.

They don't do it for personal accounts, as far as I know. Honestly, I'm not sure the Google of today would do it for a business account.

[ Parent | on HN ]