4 stories tagged account-security, newest first.
806 points by max__dev | 637 comments
Blog post by Daniel Huang arguing that emailed six-digit login codes are worse than passwords because they enable easy phishing attacks, citing Minecraft account thefts.
466 points by simiones | 255 comments
Truffle Security blog post describing how buying expired domains of failed startups lets attackers log into former employees' accounts via Google OAuth.
373 points by spenvo | 259 comments
Blog post arguing that companies like Apple, Dropbox, PayPal, Block, and Google that rely on SMS for logins and password resets are to blame for SIM-swap attacks.
619 points by Signez | 283 comments
A tweet sharing a TikTok video of HBO Max's new account-protection captcha puzzle, captioned as hilarious.