News for hackers. Stuff that matters.

A comment on Facebook hacker beat my 2FA, bricked my Oculus, and hit the company credit card. Parent comment

Re:Facebook hacker beat my 2FA, bricked my Oculus, and hit t... by stavros on Saturday August 21, 2021 @04:45AM (#28255321)
The FIDO2 key is usually protected by a PIN that wipes the key after a few wrong attempts, so it combines the two itself.

Besides, there's nothing that dictates how secure the key should be. You could use your hardware cryptocurrency wallet for this, which is probably much more secure and convenient than the average Yubikey (you can duplicate it with the seed phrase).

[ Parent | on HN ]
Re:Facebook hacker beat my 2FA, bricked my Oculus, and hit t... by Thorrez on Saturday August 21, 2021 @08:20PM (#28261825)
You can duplicate the Yubikey or the hardware cryptocurrency wallet?

Wouldn't the ability to duplicate it make it weaker?

[ Parent | on HN ]
Re:Facebook hacker beat my 2FA, bricked my Oculus, and hit t... by stavros on Saturday August 21, 2021 @08:22PM (#28261838)
You can duplicate the wallet. It would make it weaker, but it's more secure in that they usually have hardware keypads for you to enter your PIN on.
[ Parent | on HN ]