If you don’t know a completely separate protocol is operating on same port, you’re potentially opening up another way to communicate to that infrastructure.” Bullock described in a report published yesterday how he carried out the attack against OWA protected by Duo for Outlook 2FA.