Why buy a PayPal authentication token if a crook can login without it? [POLL]

by Paul Ducklin on October 17, 2012

Troy Cunningham - a friend, colleague and office neighbour of mine whom you have already met - came steaming over to my desk yesterday.

"It can't be right," he said, "that Paypal makes it so easy to bypass my two-factor authentication. I paid them for a security token and now I've found out I can authorise transactions without it. That can't be right!"

Let me explain....

continues at link ^