News for hackers. Stuff that matters.

A comment on Whistleblower: Ubiquiti Breach “Catastrophic”. Parent comment

Re:Whistleblower: Ubiquiti Breach “Catastrophic” by aneutron on Tuesday March 30, 2021 @03:18PM (#26639081)
Lack of 2FA for the AWS access ? Sure. It might have prevented the attack.

The attacker had access to the whole database. Which meant he could alter the 2FA seed. So it wouldn't have mattered much.

[ Parent | on HN ]
Re:Whistleblower: Ubiquiti Breach “Catastrophic” by dathinab on Tuesday March 30, 2021 @03:28PM (#26639215)
They seem to have gained access through getting secrets from developers as far as I understood it.

So with 2FA they would have had a much harder time to gain access to the database.

The part of changing the seed only matters for customers of the hacked company but is (as far as I can tell) unrelated to them gaining access.

[ Parent | on HN ]