writeups.xyz / Security and Privacy Failures in Popular 2FA Apps

Submitter : c2a

Date: 11 November 2022

Bounty : undisclosed

Vulnerabilities :

• Cryptographic Issues

Programs :

• LastPass
• Google
• Twilio
• Microsoft
• Duo
• Salesforce
• Latch
• Zoho

Authors :

• Conor Gilsenan
• Fuzail Shakir
• Noura Alomar
• Serge Egelman

Link :
https://www.usenix.org/system/files/sec23summer_198-gilsenan-prepub.pdf