News for hackers. Stuff that matters.
Re:Facebook Doubles Down on Misusing Your Phone Number by locust101 on Monday March 04, 2019 @07:30PM (#19307095)
Is there any other authentication method like google authenticator for 2fa to use facebook?
Re:Facebook Doubles Down on Misusing Your Phone Number by pxeboot on Monday March 04, 2019 @08:16PM (#19307304)
Facebook supports U2F security keys for 2 factor auth [1].

[1] https://m.facebook.com/notes/facebook-security/security-key-...

Re:Facebook Doubles Down on Misusing Your Phone Number by BFLpL0QNek on Monday March 04, 2019 @09:27PM (#19307620)
The UX I'd say is following dark patterns for this.

You cannot enable U2F without first enabling SMS Auth and or OTP Auth. Once u2f enabled if you delete both SMS Auth and OTP auth it disables 2 factor auth and takes you to a welcome screen to get started enabling it again with the only 2 options SMS / OTP, once enabling one of them you can add U2F again.

Also I have "security.webauth.u2f" enabled in Firefox but Facebook is the only U2F service I use that doesn't work in Firefox so it falls back to the SMS / OTP methods on login.

Re:Facebook Doubles Down on Misusing Your Phone Number by btrettel on Monday March 04, 2019 @10:50PM (#19307943)
> Also I have "security.webauth.u2f" enabled in Firefox but Facebook is the only U2F service I use that doesn't work in Firefox so it falls back to the SMS / OTP methods on login.

I noticed this as well. I was able to add my security key via Firefox, but for some reason Facebook decided that you need Chrome to use U2F when logging in.

Re:Facebook Doubles Down on Misusing Your Phone Number by EquallyJust on Monday March 04, 2019 @08:01PM (#19307230)
Re:Facebook Doubles Down on Misusing Your Phone Number by qrbLPHiKpiux on Monday March 04, 2019 @08:03PM (#19307242)
I can’t see this site because I use Pihole and this: https://github.com/jmdugan/blocklists/blob/master/corporatio...
Re:Facebook Doubles Down on Misusing Your Phone Number by EquallyJust on Monday March 04, 2019 @08:39PM (#19307411)
In that case, a help article on FB isn't going to be very helpful for you anyways
Re:Facebook Doubles Down on Misusing Your Phone Number by mikestew on Monday March 04, 2019 @11:29PM (#19308118)
Don’t get him wound up, or he’ll start in on how he doesn’t even own a TV, err, I mean have a FB account.
Re:Facebook Doubles Down on Misusing Your Phone Number by sanxiyn on Monday March 04, 2019 @09:28PM (#19307623)
Yes, you can use Google Authenticator for Facebook 2FA.