Created: 2022-09-17T09:07:06-05:00
This card pertains to a resource available on the internet.
Uber service hacked by attacker spamming login requests while the IT staff was trying to sleep. Phone continously prompted to confirm a login and they denied it.
Websites should use WebAuthn to allow integration with hardware keys as an alternative to push notifications.
Quinn: so according to [this page] push login prompt should have a "fuck off my account is being hijacked" button :blobcatlul: