Comment by halfcat

Who’s liable when a user is tricked into handing over a 2FA code? That’s the vast majority of the incidents I’ve seen over the years.