• JackbyDev
    link
    English
    32 months ago

    Blearily you unlock it, glance at a prompt, and then approve a login and fall back asleep.

    The idea that people would approve that is wild to me.

    • @[email protected]
      link
      fedilink
      English
      12 months ago

      Mate, I’ve had users who were sharing an account that only some of them had MFA prompts for. They didn’t bother checking who had initiated the prompt, they just approved it because it was easier. And that was while they were fully awake and thinking…

      • JackbyDev
        link
        English
        22 months ago

        What’s funny to me is that doing this while you know your target is asleep probably has a higher success rate just because they’re more likely to press the wrong thing just because their eyes are groggy. I can read my phone without my glasses but when I wake up in the night that’s not the case right away.