• 0 Posts
  • 36 Comments
Joined 5 months ago
cake
Cake day: May 20th, 2024

help-circle


















  • If it is just the location, then it could be spoofed.

    If it is something that requires physical presence, then you need both devices to communicate with each other. If it is not done via QR code (like some online banking do), then both devices need to be connected, e.g. via WiFi or Bluetooth. In this case, if an attacker controls one of the devices (that’s the class of attacks 2FA should prevent you from), the attacker probably controls both devices. So what’s the point then?