Attacking Google Authenticator
Probably on the verge of paranoia, but might be a reason to rate limit 2FA validation attempts.
- from
- IAM
- added
- 2026-10-10
- likes
- 0
similar
-
-
Beyond Passwords: 2FA, U2F and Google Advanced Protection troyhunt.com
An excellent walk-trough over all these technologies.
-
Fail2ban fail2ban.org
-
google-authenticator github.com
The Google Authenticator project includes implementations of one-time passcode generators for several mobile platforms, as well as a pluggable authentication module (PAM). One-time passcodes are generated using open standards developed by the Initiative for Open Authentication…
-
SMS 2FA auth is deprecated by NIST techcrunch.com
NIST has said that 2FA via SMS is bad and awful since 2016.
-
IAM › Multi-factor auth: “Probably on the verge of paranoia, but might be a reason to rate limit 2FA validation attempts.”