News for hackers. Stuff that matters.

A comment on Identify with email: no need for passwords.

Re:Identify with email: no need for passwords by captaincrunch on Tuesday September 10, 2013 @09:00PM (#6364767)
This is essentially just two-factor using email... give me your phone and I can steal anything I need.
[ Parent | on HN ]
Re:Identify with email: no need for passwords by aes on Tuesday September 10, 2013 @09:04PM (#6364784)
Assuming the phone isn't locked.

A combination with email confirmation plus two-step verification like Google Authenticator could work as well.

[ Parent | on HN ]
Re:Identify with email: no need for passwords by parsnips on Tuesday September 10, 2013 @09:25PM (#6364864)
If the attacker has the phone, the second factor (typically sms) won't work very well.
[ Parent | on HN ]