Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Not true. The attacker is the only one who actually uses the 2FA. The user never gets logged in.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: