Original post: infosec.exchange (glitch-soc (Mastodon fork))

BeyondMachines ( @beyondmachines1@infosec.exchange: "#VibeCoding your MFA". Attached image: a two-factor authentication screen that says "We have just sent the code 435841 to your phone number: xxx-xxx-8247. Please enter the code below to access your account:"
you are viewing a single comment's thread
view the rest of the comments
[–] 13 points 1 year ago* (last edited 1 year ago)

I've seen very similar in the wild, the webapp would send a request to the API with the numbers so that the captcha image was generated

  • source