Russian hackers bypass Gmail MFA using stolen app passwords
drrodneymckay_ @ drrodneymckay_ @sh.itjust.works Posts 0Comments 19Joined 2 yr. ago
drrodneymckay_ @ drrodneymckay_ @sh.itjust.works
Posts
0
Comments
19
Joined
2 yr. ago
Deleted
Permanently Deleted
In this case with app passwords it would not. App passwords is a feature to basically support less secure software and scenarios. The problem here is password reuse.
App passwords by design are limited to one auth method or source. Imagine a photo copier sending email. If you needed MFA for each copy and to change the password every 30-90 days, it would be a pain. So app password , longer harder password only used for the one place. But people still use easy password that they use elsewhere.