Skip to Content
1-11-2010 @ 3:37PM
Ulurjah, second paragraph in your post. If I'm not mistaken inorder to remove an authenticator from an account it is tied to the person trying to remove it has to enter the long serial code on the back of the authenticator, no?If I'm correct, the phisher could log in based on your scenario but they couldn't unauthenticate the account they were logged in to. The damage they could do would merely be limited to that one log in session which would only last until the owner noticed he had been logged out and attempted to log back in.
First time? A confirmation email will be sent to you after submitting.
Members enter your username and password.
Enter your AOL or AIM screenname and password.
Please keep your comments relevant to this blog entry. Email addresses are never displayed, but they are required to confirm your comments.
When you enter your name and email address, you'll be sent a link to confirm your comment, and a password. To leave another comment, just use that password.
To create a live link, simply type the URL (including http://) or email address and we will make it a live link for you. You can put up to 3 URLs in your comments. Line breaks and paragraphs are automatically converted — no need to use <p> or <br /> tags.