Tag: two factor authentication
-
Keeping 2FA Secrets in a Password Safe?
I use my password manager to generate TOTP second factor codes. I know this is controversial, with some folks claiming it reduces multifactor authentication down to a single factor and is therefore no better than just a username/password, but I disagree, and I can explain why.
-
Hey @VOXI_UK! There's a security #vulnerability in your website. An attacker can (a) exfiltrate mobile numbers and (b) authenticate bypassing OTP.
Not sure who to talk to about ethical disclosure. Let me know? -
HTML attributes to improve your two factor experience
Dan summarises a Twilio article showing how your tags can be improved to better-support two-factor authentication.
-
That moment when you realise, to your immense surprise, that the research you've spent most of the year on might actually demonstrate the thing you set out to test after all. 😲
Screw you, null hypothesis. -
Protecting Yourself from Identity Theft
Bruce speaks my mind.
-
Second Factor Safety Net
If your phone is your second-factor, what happens when you lose it? Dan shares his backup strategies and encourages you to think about your own.
-
Before You Turn On Two-Factor Authentication
Many online accounts allow you to supplement your password with a second form of identification, which can prevent some prevalent attacks. The second factors you can use to identify yourself include authenticator apps on your phone, which generate codes that change every 30 seconds, and security keys, small pieces of hardware similar in size …