Web Web - When logging in, I was spammed with 2-factor authentication emails

Status
Not open for further replies.

Blirkit

yo
=(eGO)=
Joined
Apr 20, 2019
Messages
84
What is the scope of your bug report?
Web

Short description of the bug
When logging in, I was spammed with 2-factor authentication emails

Detailed description of the bug
When I logged in today I was prompted to verify my account with 2-factor authentication. I go to my email to find my account spammed with 6 different emails each with a different verification code. I used the newest one and it worked, but I imagine this 2 step authentication is not meant to be sent this many times.

Attachments
File(s) attached
 

Attachments

  • webbugthing.png
    webbugthing.png
    25.2 KB · Views: 83
Your daily reminder that email based 2FA is inherently unsecure. It is heavily recommended to use TOTP (in most cases, app-based 2FA).

As to why this issue is happening, my best guess is that the mail server was unresponsive for a short while and the requests got resent multiple times. When it stopped being unresponsive, everything got sent in one big blast.
 
Status
Not open for further replies.

Latest posts

Back
Top