News for hackers. Stuff that matters.

A comment on FTC fines Twitter $150M for using 2FA phone numbers for ad targeting. Parent comment

Re:FTC fines Twitter $150M for using 2FA phone numbers for a... by jazzythom on Wednesday May 25, 2022 @05:54PM (#31511149)
Actually its more secure to use NFC yubikey w/ their app than google authenticator for TOTP bc the key is in the yubikey enclave vs the phones
[ Parent | on HN ]
Re:FTC fines Twitter $150M for using 2FA phone numbers for a... by cheeze on Wednesday May 25, 2022 @06:20PM (#31511437)
The tradeoff is usability though. I can have a TOTP code stored on two separate phones in two separate locations versus needing a yubikey always present.

To me, I'm too forgetful and dumb to not lose a yubikey, but I manage to not lose my phone.

[ Parent | on HN ]
Re:FTC fines Twitter $150M for using 2FA phone numbers for a... by drivers99 on Wednesday May 25, 2022 @06:12PM (#31511357)
I just started using that and would recommend it. When you set it up you add each key you own from the same QR code.
[ Parent | on HN ]