https://nalar.dev/tags/phishing-resistance/ Recent content in Phishing Resistance on Nalar Hugo en-us Wed, 09 Sep 2026 00:00:00 +0700 https://nalar.dev/design-push-mfa-to-resist-prompt-fatigue/ Wed, 09 Sep 2026 00:00:00 +0700 https://nalar.dev/design-push-mfa-to-resist-prompt-fatigue/ <p>Push-based multi-factor authentication can make sign-in convenient: after a password is accepted, the user receives a prompt on a trusted device and approves the attempt. The weakness appears when the prompt itself becomes easy to approve without understanding what it represents.</p> <p>If an attacker obtains a password and can repeatedly trigger approval requests, the legitimate user may eventually approve one because the prompts are confusing, disruptive, or mistaken for a request they initiated. The second factor still exists, but its security value has been reduced to a repeated yes-or-no question.</p>