FlyerTalk Forums - View Single Post - AwardWallet Hack
Thread: AwardWallet Hack
View Single Post
Old Jul 30, 2015 | 3:07 pm
  #27  
josephstern
FlyerTalk Evangelist
10 Countries Visited
All eyes on you!
15 Years on Site
 
Join Date: Jul 2006
Location: Upper Sternistan
Posts: 10,685
Originally Posted by lopinc1
If you were already logged in (via remembered cookies) then you wouldn't be prompted for the two-factor code. The two-factor code is used when you log in on that browser initially.
Maybe, but most two-factor situations (certainly Google) require you to re-authenticate when doing things like lessening security, or changing passwords.

This is pretty insecure.
josephstern is offline  
Reply