Hello to whom this may concern.,
As i was exploring around after setting up the Google 2-Step Authentication, I discovered that anyone can just obtain the application-specific password and login into gmail with their typical web browser, without the verification key even if you have enabled 2-step verification.
If you login from your web browser with the application-specific password, Google's browser login page will prevent you from doing so. However, if you take one's username and application-specific password and login using the Google Notifier for Mac, it will continue its login.
Now, this is just the mail notifier... we need to access the actual account inside the browser right? Well, simply go to the Google Notifier icon on the Menu Bar, and click "Go to Inbox." Done. Authenticated. Verification code unnecessary.
As i was exploring around after setting up the Google 2-Step Authentication, I discovered that anyone can just obtain the application-specific password and login into gmail with their typical web browser, without the verification key even if you have enabled 2-step verification.
If you login from your web browser with the application-specific password, Google's browser login page will prevent you from doing so. However, if you take one's username and application-specific password and login using the Google Notifier for Mac, it will continue its login.
Now, this is just the mail notifier... we need to access the actual account inside the browser right? Well, simply go to the Google Notifier icon on the Menu Bar, and click "Go to Inbox." Done. Authenticated. Verification code unnecessary.
Monday, February 27, 2012
kumaran vr



