Make the 2FA code a one time use only then the code would be useless. | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

MekaiGS on March 14, 2014 | parent | context | favorite | on: Google Docs Users Targeted by Phishing Scam

Make the 2FA code a one time use only then the code would be useless.

SoftwareMaven on March 14, 2014 [–]

Not true. The attacker is the only one who actually uses the 2FA. The user never gets logged in.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact