Noleli’s Twitter Archive—№ 24,826

mdekstrand Yeah. I mean, it’s all about expected value, right? And hopefully 2fa on other services would stop someone from getting much farther than email with. Plus, the HN thread gave me the impression that the attack wouldn’t have worked on someone with totp 2fa enabled.