Experts Bypass Google’s 2-Step Verification by Abusing Application-Specific Passwords

Researchers from Duo Security have identified a way to circumvent Google’s two-factor authentication system and reset a user’s master password by abusing the victim’s application-specific password (ASP). Google requires users to create ASPs for applications that don’t... [ read more >> ]