Skip to main content Skip to bottom nav

2FA

User Profile: GodsKind
GodsKind June 30th, 2023

I think it would be cool if 7cups supported two factor authentication when logging into the application. I especially think this given the fact that we live in a day in age with hackers, etc. Given the fact that some issues people talk about can be sensitive I also think this would be a decent idea because of this fact.

3
User Profile: trueconfidant123
trueconfidant123 June 30th, 2023

@GodsKind

Makes sense to me. It would be a good idea to introduce this feature. Also, I believe they need to go stricter with giving admission onto this platform for both members and listeners. There can be an additional layer of authenticity or safety check, like you mentioned. This would prevent hackers , or those casually joining in to cause disruptions in the community sceptical to do so. Lately, we have been experiencing such cases and it's best they consider it as a constructive feedback. Thank you for this post!

User Profile: WeirdoGuy
WeirdoGuy June 30th, 2023

https://github.com/carlospolop/hacktricks/blob/master/pentesting-web/2fa-bypass.md


As you can see from the URL I provided, this method is bypassable.


https://infosecwriteups.com/phishing-101-bypassing-2fa-like-a-pro-8936b43d988


This one is also another "efficient" bypassing method for 2FA and MFA guarded websites/apps.


I can provide lots of websites similar to these 2, but the key ceveat is: There is no such thing called "security" on the Internet, and anything that is a human product can easily become manipulated by malicious users.

User Profile: incredibleCloud2222
incredibleCloud2222 July 9th, 2023

As if it's not annoying enough everywhere else. The only thing I like about this dump is that at least some of its outdated features are kinda user-friendly.

Keep in mind that many if not most users here struggle with basic executive function. Imagine having to log in in the middle of a breakdown, and having to deal with an annoying extra step in the middle of that.

Personally, I think things like two factor authentication should only be optional. I understand that some people might be paranoid enough to think hackers are after their 7cups account, but I would never choose to add this kind of thing to my own process.