Comment

Comment by Calamityjanitor

MFA doesn't stop this kind of phishing. If you're tricked to put in your password, you'll likely put in your 2FA code right after. A yubi key or device passkey that uses webauthn can stop these methods, since the domain seeking authentication is checked and won't authenticate unless it's the original domain.

Even then, that won't help scams and fraud that just trick you into sending money, or direct you to install malware.

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton