Coinbase Phishers Steal One-Time Passwords

krebsonsecurity.com

14 pointstodsacerdoti2 comments

WebAuthn fixes this. You cannot give a password to a scam site, because there is no password and the authentication token is tied to the original site.

https://webauthn.io/

I just tested and it worked with my iPad and TouchId.

Yeah, because Cisco is and always was trustworthy and never put hardcoded passwords and backdoors in their hardware. /s

Reply on news.ycombinator.com