News for hackers. Stuff that matters.

A comment on Facebook hacker beat my 2FA, bricked my Oculus, and hit the company credit card. Parent comment

Re:Facebook hacker beat my 2FA, bricked my Oculus, and hit t... by breakingcups on Friday August 20, 2021 @04:40PM (#28251162)
So the email address is not 2FA secured?
[ Parent | on HN ]
Re:Facebook hacker beat my 2FA, bricked my Oculus, and hit t... by rsync on Friday August 20, 2021 @05:12PM (#28251459)
It's my own mail server. I just tail the mail spool ...
[ Parent | on HN ]
Re:Facebook hacker beat my 2FA, bricked my Oculus, and hit t... by neartheplain on Saturday August 21, 2021 @05:45PM (#28260847)
Is your account with the DNS registrar who controls your MX record 2FA-secured?

>[...] via encrypted SMTP

In addition to establishing a secure socket, does the mule validate the mail server's TLS certificate name?

[ Parent | on HN ]
Re:Facebook hacker beat my 2FA, bricked my Oculus, and hit t... by danlugo92 on Friday August 20, 2021 @04:45PM (#28251207)
Could be his email address uses OTP or UFA, which would make it secure.

If anything SMSs are much more dangerous than OTP and services should eschew them.

Sadly some of them still force you to have SMS.

[ Parent | on HN ]