News for hackers. Stuff that matters.
Re:Bypassing Google’s Two-Factor Authentication by grey-area on Monday February 25, 2013 @03:05PM (#5281403)
Could anyone explain to me what's the point of Google's two-factor authentication?

Without application specific passwords it's actually pretty secure. With ASP of course, according to this article, it's no more secure at all. So it looks like ASPs need to be revised/locked down. That doesn't mean that 2-factor security is useless in principle, just that this facet of it is insecure.

Re:Bypassing Google’s Two-Factor Authentication by badgar on Monday February 25, 2013 @03:55PM (#5281733)
> With ASP of course, according to this article, it's no more secure at all.

This is not at all the conclusion of the article. This isn't a bright-line issue; security exists on a spectrum.