Posté par: igor51 le février 27, 2013, 19:44:24
For some time, attackers had the ability to bypass Google's two-step authentication system through access to users' app-specific passwords, giving them full access to victims' Google accounts, including Gmail. The vulnerability that enables this attack, discovered by researchers from DuoSecurity, has been patched by Google.
Source: Researchers Bypass Google Two-Factor Authentication (http://threatpost.com/en_us/blogs/researchers-bypass-google-two-factor-authentication-022513)