+ - Bypassing Google Two-Factor Authentication->
Submitted
by
Anonymous Coward
An anonymous reader writes "The team at Duo Security figured out how to bypass Google's two-factor authentication, abusing Google's application-specific passwords. Curiously, this means that application-specific passwords are actually more powerful than users' regular passwords, as they can be used to disable the second factor entirely to gain control of an account. Duo released this today after Google fixed this last week — 7 months after initially replying that this was expected behavior!"
Link to Original Source
Link to Original Source
Bypassing Google Two-Factor Authentication More Login
Bypassing Google Two-Factor Authentication