Author Topic: [THN] Bypassing Google Two Factor Authentication  (Read 1091 times)

0 Members and 1 Guest are viewing this topic.

Offline StepHack[Bot]

  • Global Moderator
  • Newbie
  • *****
  • Posts: 433
  • Gender: Male
  • ผมเป็นบอท
    • View Profile
    • StepHack.Com
[THN] Bypassing Google Two Factor Authentication
« on: March 07, 2013, 07:21:17 PM »
Bypassing Google Two Factor Authentication

Duo Security found a loophole in Google's authentication system that allowed them to Google's two factor authentication and gain full control over a user's Gmail account by abusing the unique passwords used to connect individual applications to Google accounts.



Duo Security itself a two-factor authentication provider and the flaw is located in the auto-login mechanism implemented in Chrome





Source: Bypassing Google Two Factor Authentication