New Gmail Attack Bypasses Passwords and 2FA to Read All Email (forbes.com) 1 points by hammock 4y ago ↗ HN
[–] akerl_ 4y ago ↗ This feels like clickbait.The “bypass” is that it’s malware on the user endpoint, so it just lurks the data using the user’s existing session. So it’s not a flaw with Gmail or limited to that platform. [–] hancholo 4y ago ↗ thanks for the tl;dr. I hate clickbait
2 comments
[ 1.6 ms ] story [ 20.1 ms ] threadThe “bypass” is that it’s malware on the user endpoint, so it just lurks the data using the user’s existing session. So it’s not a flaw with Gmail or limited to that platform.