One month after TikTok implemented MFA for its users, it was discovered that the feature was only enabled for the mobile app and not the website.\u00a0 This lapse in TikTok\u2019s new security feature would allow attackers to bypass MFA by logging into an account with compromised credentials via its website.\u00a0 Luckily there is not much an attacker can do to a compromised account when logging into TikTok via the website.\u00a0 The website dashboard does not allow passwords to be reset.\u00a0 However, an attacker could still deface an account by uploading and posting videos in an attempt to deface the account.\u00a0 Another flaw found in TikTok\u2019s platform was that the mobile app does not show sessions taking place in real-time from the web dashboard.\u00a0 This means that TikTok does not warn users when someone used their credentials to access their TikTok account via a web browser.<\/p>\n
<\/p>\n
https:\/\/www.zdnet.com\/article\/you-can-bypass-tiktoks-mfa-by-logging-in-via-a-browser\/<\/p>\n","protected":false},"excerpt":{"rendered":"
One month after TikTok implemented MFA for its users, it was discovered that the feature was only enabled for the mobile app and not the website.\u00a0 This lapse in TikTok\u2019s new security feature would allow attackers to bypass MFA by logging into an account with compromised credentials via its website.\u00a0 Luckily there is not much […]<\/p>\n","protected":false},"author":25060,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_genesis_hide_title":false,"_genesis_hide_breadcrumbs":false,"_genesis_hide_singular_image":false,"_genesis_hide_footer_widgets":false,"_genesis_custom_body_class":"","_genesis_custom_post_class":"","_genesis_layout":"","footnotes":""},"categories":[799101],"tags":[],"class_list":["post-6722","post","type-post","status-publish","format-standard","category-week-05-system-and-user-enumeration","entry"],"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/community.mis.temple.edu\/mis5211sec702fall2020\/wp-json\/wp\/v2\/posts\/6722","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/community.mis.temple.edu\/mis5211sec702fall2020\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/community.mis.temple.edu\/mis5211sec702fall2020\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/community.mis.temple.edu\/mis5211sec702fall2020\/wp-json\/wp\/v2\/users\/25060"}],"replies":[{"embeddable":true,"href":"https:\/\/community.mis.temple.edu\/mis5211sec702fall2020\/wp-json\/wp\/v2\/comments?post=6722"}],"version-history":[{"count":2,"href":"https:\/\/community.mis.temple.edu\/mis5211sec702fall2020\/wp-json\/wp\/v2\/posts\/6722\/revisions"}],"predecessor-version":[{"id":6724,"href":"https:\/\/community.mis.temple.edu\/mis5211sec702fall2020\/wp-json\/wp\/v2\/posts\/6722\/revisions\/6724"}],"wp:attachment":[{"href":"https:\/\/community.mis.temple.edu\/mis5211sec702fall2020\/wp-json\/wp\/v2\/media?parent=6722"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/community.mis.temple.edu\/mis5211sec702fall2020\/wp-json\/wp\/v2\/categories?post=6722"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/community.mis.temple.edu\/mis5211sec702fall2020\/wp-json\/wp\/v2\/tags?post=6722"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}