Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
Get HideMyAss! VPN, PC Mag's Top 10 VPNs of 2016 for 55% off for a Limited Time ×
Google

Submission + - Bypassing Google Two-Factor Authentication (duosecurity.com)

An anonymous reader writes: The team at Duo Security figured out how to bypass Google's two-factor authentication, abusing Google's application-specific passwords. Curiously, this means that application-specific passwords are actually more powerful than users' regular passwords, as they can be used to disable the second factor entirely to gain control of an account. Duo released this today after Google fixed this last week — 7 months after initially replying that this was expected behavior!
This discussion was created for logged-in users only, but now has been archived. No new comments can be posted.

Bypassing Google Two-Factor Authentication

Comments Filter:

CChheecckk yyoouurr dduupplleexx sswwiittcchh..

Working...