Failures in Twitter’s Two-Factor Authentication System
November 17 2022Twitter is having intermittent problems with its two-factor authentication system:
Not all users are having problems receiving SMS authentication codes, and those who rely on an authenticator app or...
Read more
Defeating Phishing-Resistant Multifactor Authentication
November 9 2022CISA is now pushing phishing-resistant multifactor authentication. Roger Grimes has an excellent post reminding everyone that “phishing-resistant” is not “phishing proof,” and that everyone needs to stop pretending otherwise. Hi...
Read moreMan-in-the-Middle Phishing Attack
August 25 2022Here’s a phishing campaign that uses a man-in-the-middle attack to defeat multi-factor authentication:
Microsoft observed a campaign that inserted an attacker-controlled proxy site between the account users and the...
Read more
When Security Locks You Out of Everything
June 28 2022Thought experiment story of someone who lost everything in a house fire, and now can’t log into anything:
But to get into my cloud, I need my password and...
Read more
Twitter was fined $150 million for using phone numbers and email addresses collected for two-factor authentication for ad targeting.
Read moreRemember the good old days when security patches rarely needed patches? Because security patches themlelves were rare enough anyway?
Read moreProblems with Multifactor Authentication
October 21 2021Roger Grimes on why multifactor authentication isn’t a panacea:
The first time I heard of this issue was from a Midwest CEO. His organization had been hit by ransomware...
Read more
Fascinating research: “Generating Master Faces for Dictionary Attacks with a Network-Assisted Latent Space Evolution.”
Abstract: A master face is a face image that passes face-based identity-authentication for a large...
Read more
Backdoor Added — But Found — in PHP
April 9 2021Unknown hackers attempted to add a backdoor to the PHP source code. It was two malicious commits, with the subject “fix typo” and the names of known PHP developers...
Read more
Recent Comments