On 21/05/14 07:38, Chris Karlof wrote: > http://shubh.am/how-i-bypassed-2-factor-authentication-on-google-yahoo-linkedin-and-many-others/
It's somewhat surprising to see Google in the same category as Yahoo (WONTFIX, NOT-OUR-PROBLEM). Here's another one that talks about SMS: http://danielpocock.com/sms-logins-an-illusion-of-security I don't agree with his conclusion, but he makes an excellent point about so many cloud-backed apps having access to your SMS (at least on Android). Francois _______________________________________________ Dev-fxacct mailing list [email protected] https://mail.mozilla.org/listinfo/dev-fxacct

