News for hackers. Stuff that matters.

A comment on Facebook hacker beat my 2FA, bricked my Oculus, and hit the company credit card. Parent comment

Re:Facebook hacker beat my 2FA, bricked my Oculus, and hit t... by dheera on Friday August 20, 2021 @04:52PM (#28251282)
Nice. I do something similar but forward it to Slack.

I also have it auto-answer 2FA calls and automatically hit the # key.

Yeah, call it not real 2FA, but it's really companies that choose to not use U2F are at fault.

[ Parent | on HN ]
Re:Facebook hacker beat my 2FA, bricked my Oculus, and hit t... by rsync on Friday August 20, 2021 @05:37PM (#28251695)
"I also have it auto-answer 2FA calls and automatically hit the # key."

One year at defcon - maybe 20 years ago - the speaker told an anecdote about a user who had set up a webcam and put their RSA token under it.

And we all laughed ... "haha what a dummy ... I can't believe users are so stupid" ...

But secretly I thought it was genius.

[ Parent | on HN ]
Re:Facebook hacker beat my 2FA, bricked my Oculus, and hit t... by dheera on Friday August 20, 2021 @06:52PM (#28252294)
Oh I've done that too before. If they only give me one RSA token and no backup, then that's what i do.
[ Parent | on HN ]
Re:Facebook hacker beat my 2FA, bricked my Oculus, and hit t... by banana_giraffe on Friday August 20, 2021 @10:16PM (#28253484)
I've done exactly this. Well, my SO did it at my direction since I was in another country and had forgotten to take the token with me.
[ Parent | on HN ]
Re:Facebook hacker beat my 2FA, bricked my Oculus, and hit t... by a1369209993 on Friday August 20, 2021 @07:03PM (#28252369)
> set up a webcam and put their RSA token under it.

That's only stupid if anyone other than you has access to your webcam.

[ Parent | on HN ]
Re:Facebook hacker beat my 2FA, bricked my Oculus, and hit t... by cortesoft on Friday August 20, 2021 @05:02PM (#28251373)
U2F is great, but these companies want to be able to provide 2FA for people who won’t/can’t have a dedicated hardware device for 2FA.
[ Parent | on HN ]
Re:Facebook hacker beat my 2FA, bricked my Oculus, and hit t... by dheera on Friday August 20, 2021 @05:23PM (#28251560)
Yeah but (a) by not supporting U2F they suck (b) I don't want them to use 2FA as a magic excuse to get my phone number
[ Parent | on HN ]