Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Didn't linked in and facebook do this? Give us your email account and password and we'll add your friends for you! So easy!

You can bet someone is still doing it and more will try it until such time as there are negative consequences for it. Seems that there aren't any now.



If you're going to get social engineered into giving up your password, chances are you're going to get social engineered for your 2fa code as well.


They'll use Oauth now, which won't be stopped by 2FA




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: