News for hackers. Stuff that matters.

A comment on Bypassing Google’s Two-Factor Authentication. Parent comment

Re:Bypassing Google’s Two-Factor Authentication by Inufu on Monday February 25, 2013 @02:22PM (#5281072)
If I want to hack your account, it's not enough to steal your password, I also need to steal your smartphone to generate the tokens.

edit: I was referring to the Google Authenticator App, not sending the codes over SMS. That's imho less secure.

[ Parent | on HN ]
Re:Bypassing Google’s Two-Factor Authentication by xyzzyz on Monday February 25, 2013 @02:31PM (#5281146)
You don't have to steal a master password. It's enough to steal an application specific password, and if you do that, you won't need a smartphone to read my mail.
[ Parent | on HN ]