Ana ɗaukar Tabbatar da Tabbatarwa Mai Mataki Biyu a matsayin mafi aminci wajen kare asusun Google ɗinku, wanda ke buƙatar ku (mai amfani) ku shigar da lambar da kuka karɓa ta hanyar SMS a wayarka kafin ku shiga asusun da ke da kariya ta 2FA. Wannan yana hana kowa samun damar shiga asusunku ba tare da izini ba, koda kuwa sun sami damar samun kalmar sirrinku. Kuma wannan tsarin tantancewa mai matakai biyu yana samun tallafi daga ayyuka da yawa na kan layi, gami da manyan bankuna, Google, Facebook, har ma da gwamnati.
Amma, wataƙila kun taɓa jin wasu rahotanni game da asusun Gmail da aka yi wa kutse, duk da cewa mai amfani ya ba da damar Google 2FA ko ingantaccen abu biyu. Wannan saboda masu fashin baki suna amfani da wata sabuwar dabara don yaudarar masu amfani, ta hanyar aika musu da sakon SMS kamar Google, suna neman lambar tabbatarwa ta 2FA.
A farkon wannan makon, Alex MacCaw , wanda ya kafa kamfanin Data API Company Clearbit, ya wallafa wani hoton bidiyo na wani sakon tes da ya samu yana kokarin yin amfani da shi wajen wuce 2FA a asusun Google.
A yi hattara, akwai wani mummunan harin auth na Google 2 factor da ke faruwa. pic.twitter.com/c9b9Fxc0ZC
— Alex MacCaw (@maccaw) 4 ga Yuni, 2016
Sakon yana kamar haka:
"(Google ™ Sanarwa) Kwanan nan mun lura da yunƙurin sa hannu don jschnei4@gmail.com daga adireshin IP 136.91.38.203 (Vacaville, CA). Idan baku shiga daga wannan wurin ba kuma kuna son kulle asusunku na ɗan lokaci, da fatan za a ba da amsa ga wannan faɗakarwa tare da lambar tabbatarwa mai lamba 6 da za ku karɓa na ɗan lokaci. Idan baku ba da izinin wannan yunƙurin shiga ba, da fatan za a yi watsi da wannan faɗakarwar. ”
Ga yadda dabarun dan dandatsa ke aiki:
- Dan Dandatsa ya tura ma wanda ake so sakon ta hanyar sakon tes, yana nuna kamar shi ne kamfanin da abin ya shafa ke da asusu.
- Sakon tes din ya ce kamfanin ya gano wani aiki na '' shakku '' zuwa asusun wanda ake so kuma don haka yana aika musu da lambobi mai lamba 6, wanda ya kamata mai amfani da shi ya aika musu da sakonni don kaucewa kulle asusun nasa.
- Mai amfani da niyya, yana damuwa da cewa ana satar su kuma ba sa son rasa damar samun bayanansu, sai ya sake tura lambar, yana mai imanin cewa sun dakile yunkurin satar.
- Amma a yin haka, a zahiri sun samarwa dan dandatsa lambar tsaro don kutsawa cikin asusun.
- Bayan haka, dan gwanin kwamfuta zai shigar da kalmar wucewa ta mai amfani da ita, sannan kuma wannan lambar 2FA mara kyau ta shigo da ita, sannan ya shiga asusun ba tare da sanin mai amfanin ba.
Abin farin ciki, MacCaw yana da wayo sosai don hango dabarun su kuma bai faɗi ga wannan sabon nau'in ilimin injiniyan zamantakewar ba. Koyaya, idan kai mai amfani da Gmel ne, ya kamata ka kiyaye sosai kamar yadda masu fashin kwamfuta ke tafe da dabaru da yawa don samun damar shiga asusun ka na Gmel da na Google. Kuma kar a rubuta lambobin ku na 2FA ga kowa, koda kuwa sun bayyana halal ne.
