Fooled by Randomness – Two-Factor Authentication
Current web security best-practices call for the use of two-factor authentication. This authentication mechanism forces the owner of an account to provide two pieces of information to prove identity. This information is usually a password and a random code sent to the user’s device. Two-factor authentication is one of the easiest ways to improve account security. However, its security relies on the random code being being – well – random....