News for hackers. Stuff that matters.

A comment on The Most Expensive Lesson of My Life: Details of SIM Port Hack. Parent comment

Re:The Most Expensive Lesson of My Life: Details of SIM Port... by Reedx on Tuesday May 21, 2019 @09:25PM (#19976899)
Oy, does that mean Authy is vulnerable to this?

https://authy.com/phones/reset/?proceed=true

[ Parent | on HN ]
Re:The Most Expensive Lesson of My Life: Details of SIM Port... by odensc on Tuesday May 21, 2019 @09:29PM (#19976924)
Authy backups are encrypted with a password (at least, if you set them to), so you can't gain access with just the phone number.

However I believe their "OneTouch" system (e.g. Twitch & Namecheap) is linked to phone numbers only, so that could be breached via SMS.

I'd recommend using a standalone 2FA app which can be backed up to your own cloud storage. (e.g. Google Drive/Dropbox)

[ Parent | on HN ]