2FA token required for login to admin or journalist interfaces implemented
MITIG19 · Implemented: In place. · Defined in mitigations.py:43
Threats it mitigates
| Threat | Status | Risk | After mitigations |
|---|---|---|---|
| Unknown vulnerabilities in Tor (incl. Onion Service cryptography, authentication) THREAT37 | partially mitigated | 6 medium | 6 medium |
| Authentication vulnerability in Journalist interface THREAT13 | mitigated | 6 medium | 4 medium |
| Journalist user performs malicious action under another user's account THREAT170 | out of scope | 4 medium | 4 medium |