News for hackers. Stuff that matters.

A comment on Hackers Are Hijacking Phone Numbers and Breaking into Email, Bank Accounts. Parent comment

Re:Hackers Are Hijacking Phone Numbers and Breaking into Ema... by tokenizerrr on Monday June 12, 2017 @07:36AM (#14536430) 

    adb backup com.google.android.apps.authenticator2
all the codes are stored in the sqlite3 database which you can open with standard command line tools.

there are also more user friendly backup apps such as helium, but adb works quite nicely.

[ Parent | on HN ]
Re:Hackers Are Hijacking Phone Numbers and Breaking into Ema... by discreditable on Monday June 12, 2017 @03:08PM (#14540079)
Last I checked, adb backup doesn't backup the secrets. Has that changed?
[ Parent | on HN ]
Re:Hackers Are Hijacking Phone Numbers and Breaking into Ema... by tokenizerrr on Monday June 12, 2017 @04:04PM (#14540605)
I don't know but I've been using this technique for a year or two now with great success. The Google authenticator just stores its secrets in the salute db every app gets.
[ Parent | on HN ]
Re:Hackers Are Hijacking Phone Numbers and Breaking into Ema... by tokenizerrr on Monday June 12, 2017 @07:36PM (#14541987)
Autocorrect kicked in there... sqlite* (it is absurdly difficult to put an asterisk at the end of a message on HN. it seems to require a trailing whitespace[1] for it to show up, however the input is trimmed, so...)

[1] https://news.ycombinator.com/formatdoc

[ Parent | on HN ]
Re:Hackers Are Hijacking Phone Numbers and Breaking into Ema... by discreditable on Tuesday June 13, 2017 @11:27AM (#14545482)
Have you tried a restore on a factory-reset device?
[ Parent | on HN ]
Re:Hackers Are Hijacking Phone Numbers and Breaking into Ema... by tokenizerrr on Tuesday June 13, 2017 @11:50AM (#14545699)
I have not, but I have extracted the backup with https://sourceforge.net/projects/adbextractor/ and inspected the contents, visually confirming the secrets are there. Even if a restore doesn't work, I can re-enter them manually from the information in the sqlite database. However I fully expect a restore to work.
[ Parent | on HN ]