Google Proposes Method for Stopping Multifactor Runaround

Device Bound Session Credentials Tie Authentication Cookies to Specific Computers
Google is prototyping a method to stymie hackers who get around multifactor security by stealing authentication cookies from desktops. Google says its proposal for cryptographically tying authentication tokens to computers will succeed where previous attempts such as Token Binding failed.

authentication authentication cookies computers cookies credentials desktops device device bound session credentials google hackers multifactor prototyping security session stealing token tokens