#Meistertask two factor auth software#

Taking the human element out of security is not an easy task, but that is what Universal 2nd Factor, or U2F, tries to do - it’s an open protocol for second-factor hardware keys that doesn’t rely on the user to make sure he’s on the right website there is a built-in mechanism on the key itself to verify that. With more devices connected to the Internet, these attacks become more profitable (we’ve seen a surge during the last few years), and now more companies are starting to pay attention to phishing attacks.

Source: Bleeping Computer via Google Transparency Report (archive)Īttackers are becoming more proactive and trying to force errors. Phishing is a hard problem to solve because the bad actor exploits human behavior that has been ingrained in all of us for the last couple hundred thousand years and will probably continue to be for a long time in the future.Įverybody is prone to fall for phishing campaigns, even security-conscious people, because these attacks are never head-on, explicit attacks, but sneaky ones and when you aren’t expecting them.Īnd if we look at types of attacks over the years, there is a clear trend: the number of websites containing malware has been declining, while the number of phishing websites skyrocketed in the last few years. It’s the user who must verify they are entering the passcode into the legitimate website, and bad actors exploit that.

#Meistertask two factor auth software#

When I wrote about how software 2FA is a step-up from SMS 2FA, I also mentioned how there’s one attack vector that software 2FA is still vulnerable to phishing.