Re:We Got Phished
by torbjorn on Monday October 24, 2016 @03:56PM
(#12782265)
To use google authenticator you do not need to give out your number. Most sites will have a qr code you can scan with your phone and the google authenticator app uses that to generate 2fa codes that are valid within a certain time frame.
[ Parent
| on HN ]
Re:We Got Phished
by probably_wrong on Monday October 24, 2016 @04:02PM
(#12782323)
I just checked. The first screen I got says "Step 1/3: we'll either call you or send you an SMS. Please give us your phone number".
You cannot skip this step on GMail, or at least I couldn't find how. I know you can use the app afterwards, but not before.
Other sites just give me the code, as you say. But not GMail.
You can rent a burner SMS number for a couple bucks on a site like https://smsprivacy.org/
Re:We Got Phished
by calvano915 on Monday October 24, 2016 @05:00PM
(#12782854)
You could create a Google Voice account with a free number and link to that. Set it up so calls/sms/etc go nowhere but can be changed if you need to restore your Gmail account later with that number.
How recently have you tried to do so? I tried a couple of months ago to set up a Gmail account with a Google Voice number for verification, and it refused to let me with a message which I recall as being vaguely like "This is not an acceptable verification number".
Re:We Got Phished
by dredmorbius on Tuesday October 25, 2016 @12:17AM
(#12785248)
The workflow does not, and so far as I can tell, never has, support this. I've commented on it for years at G+.