Re: [Full-disclosure] Google Accounts Security Vulnerability

[Jeffrey Walton <noloader@xxxxxxxxx>]

On Fri, May 18, 2012 at 4:00 PM, coderman <coderman@xxxxxxxxx> wrote:
> On Thu, May 17, 2012 at 5:51 AM, Mike Hearn <hearn@xxxxxxxxxx> wrote:
>> I understand your concerns, however they are not valid.
>
> best thread on list all month. :)
>
> now if only Google's two factor auth could use tamper resistant tokens.
>  i trust my phone even less than my browser... :(
"Two-channel breached: a milestone in threat evaluation, and a floor
on monetary value,"
http://financialcryptography.com/mt/archives/001349.html.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/