{
"$type": "site.standard.document",
"bskyPostRef": {
"cid": "bafyreieasguktp7y45m6fawgpt2dc6rq6m7kpukqp53glmv5la3lzfsdse",
"uri": "at://did:plc:cmylgpl5xczdixbceohfjpo7/app.bsky.feed.post/3mnihv6325dq2"
},
"path": "/@zackwhittaker/116693743366298593",
"publishedAt": "2026-06-04T20:33:34.000Z",
"site": "https://mastodon.social",
"tags": [
"@dangoodin"
],
"textContent": "Personally I think Dashlane's update to its 2FA-busting data breach notice is still lackluster and doesn't explain that much beyond its original post. That said, @dangoodin does a solid job of reading between the lines and filling in the gaps. tl;dr: Bruteforcing Dashlane customer account 2FA codes was relatively easy. https://arstechnica.com/security/2026/06/dashlane-explains-how-attackers-managed-to-download-encrypted-password-vaults/",
"title": "Zack Whittaker (@zackwhittaker@mastodon.social)"
}