News for hackers. Stuff that matters.

A comment on Reddit Security Incident. Parent comment

Re:Reddit Security Incident by chris_wot on Wednesday August 01, 2018 @01:30PM (#17664731)
Google pretty much foists it on all our employees.
[ Parent | on HN ]
Re:Reddit Security Incident by Arainach on Wednesday August 01, 2018 @01:43PM (#17664896)
In what way? For its employees, it uses physical keys: https://krebsonsecurity.com/2018/07/google-security-keys-neu...

Consumer/enterprise Google accounts have supported U2F and the Google Authenticator app for quite some time. I have SMS completely eliminated as a factor on my GMail account (Yubikey primary with codes from the app as a fallback; no way to authenticate via SMS at all).

[ Parent | on HN ]
Re:Reddit Security Incident by criddell on Wednesday August 01, 2018 @02:13PM (#17665237)
For Google, it's not a text message though, is it? IIRC, it's tied to your Google account and not to your phone number.
[ Parent | on HN ]
Re:Reddit Security Incident by chris_wot on Wednesday August 01, 2018 @07:44PM (#17668087)
They enforce it via SMS.
[ Parent | on HN ]
Re:Reddit Security Incident by tptacek on Wednesday August 01, 2018 @01:38PM (#17664842)
It does, and that is annoying, but you can and should turn it off.
[ Parent | on HN ]