1 article
MFA prompt bombing shows that the second factor is not a wall if the access decision still lands on a tired user.