Web Web - When logging in, I was spammed with 2-factor authentication emails

Status
Not open for further replies.

Blirkit

yo
=(eGO)=
Joined
Apr 20, 2019
Messages
84
What is the scope of your bug report?
Web

Short description of the bug
When logging in, I was spammed with 2-factor authentication emails

Detailed description of the bug
When I logged in today I was prompted to verify my account with 2-factor authentication. I go to my email to find my account spammed with 6 different emails each with a different verification code. I used the newest one and it worked, but I imagine this 2 step authentication is not meant to be sent this many times.

Attachments
File(s) attached
 

Attachments

  • webbugthing.png
    webbugthing.png
    25.2 KB · Views: 114
Your daily reminder that email based 2FA is inherently unsecure. It is heavily recommended to use TOTP (in most cases, app-based 2FA).

As to why this issue is happening, my best guess is that the mail server was unresponsive for a short while and the requests got resent multiple times. When it stopped being unresponsive, everything got sent in one big blast.
 
Status
Not open for further replies.
Back
Top