News for hackers. Stuff that matters.

A comment on Recent 'MFA Bombing' Attacks Targeting Apple Users. Parent comment

Re:Recent 'MFA Bombing' Attacks Targeting Apple Users by e40 on Wednesday March 27, 2024 @09:55AM (#39839134)
> Particularly 1Password which I think is a pattern if I remember correctly.

What does that mean?

[ Parent | on HN ]
Re:Recent 'MFA Bombing' Attacks Targeting Apple Users by hackinthebochs on Wednesday March 27, 2024 @10:07AM (#39839301)
Probably that the key has features that allows 1Password (and potentially anyone) to recognize that its a 1Password key. E.g. Fixed size, patterns of spaces or dashes, specific digits, embedded error correction, etc.
[ Parent | on HN ]
Re:Recent 'MFA Bombing' Attacks Targeting Apple Users by nerdjon on Wednesday March 27, 2024 @11:47AM (#39840794)
Yeah that is what I mean.

Similar to how a lot of package companies have a certain pattern, length, whatever for their tracking numbers. If there was a somewhat reliable way to say "This is a 1Password key" or "This is an iCloud key" it makes it means even without context it could be an issue.

[ Parent | on HN ]