Bypassing Google’s Two-Factor Authentication

An anonymous reader writes “The team at Duo Security figured out how to bypass Google’s two-factor authentication, abusing Google’s application-specific passwords. Curiously, this means that application-specific passwords are actually more powerful than users’ regular passwords, as they can be used to disable the second factor entirely to gain control of an account. Duo [publicly released this exploit Monday] after Google fixed this last week — seven months after initially replying that this was expected behavior!”

Share on Google+

Read more of this story at Slashdot.

via Slashdot http://tech.slashdot.org/story/13/02/26/1455237/bypassing-googles-two-factor-authentication?utm_source=rss1.0mainlinkanon&utm_medium=feed

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: