FTC fines Twitter $150M for using 2FA phone numbers for ad targeting

Re:FTC fines Twitter $150M for using 2FA phone numbers for a... by gabeio on Wednesday May 25, 2022 @07:45PM (#31512372)

Unfortunately, Sendgrid and other users of Authy with no alternative 2FA systems in place lock you into the Authy app or SMS as the fallback. There are some, very limited, workarounds for this but still requires you to have the app in Authy.

———————

On a recent find apparently Authy (the app not the sms fallback) has a weird, uh, “feature?”, where my 2fa, for example, for Sendgrid will unlock all of my Sendgrid accounts, which I personally find mildly concerning.

[ Parent | on HN ]

Re:FTC fines Twitter $150M for using 2FA phone numbers for a... by aftbit on Thursday May 26, 2022 @12:37AM (#31514624)

If you load your Sendgrid Authy 2FA on a rooted android phone, you can extract the TOTP secret that powers it under the hood and put it in Bitwarden like you prefer.

[ Parent | on HN ]

Re:FTC fines Twitter $150M for using 2FA phone numbers for a... by 3np on Wednesday May 25, 2022 @07:55PM (#31512465)

Authy used to just be TOTP IIRC - did that change?

[ Parent | on HN ]

Re:FTC fines Twitter $150M for using 2FA phone numbers for a... by vdqtp3 on Wednesday May 25, 2022 @08:09PM (#31512587)

Authy has both TOTP functionality and a proprietary system that's different, similar to Symantec VIP or Entrust

[ Parent | on HN ]