News for hackers. Stuff that matters.

A comment on FTC fines Twitter $150M for using 2FA phone numbers for ad targeting. Parent comment

Re:FTC fines Twitter $150M for using 2FA phone numbers for a... by Alupis on Wednesday May 25, 2022 @08:51PM (#31512902)
Your authenticator apps won't be backed up. They require you to export them to a QR code or some other printed format... then "restored" once you setup your new phone.

Probably a security policy thing more than a technology thing... but the result is the same. TOTP is dangerous for the wrong user.

[ Parent | on HN ]
Re:FTC fines Twitter $150M for using 2FA phone numbers for a... by jonhohle on Wednesday May 25, 2022 @09:54PM (#31513328)
For the past several years both macOS and iOS have TOTP built into the password manager. It’s non-obvious how to set it up and doesn’t auto-prompt readily like password management does, but I’ve moved all of my TOTP over and have a backup, it’s synced to all my devices, and I don’t need a dedicated TOTP app.
[ Parent | on HN ]
Re:FTC fines Twitter $150M for using 2FA phone numbers for a... by jb1991 on Thursday May 26, 2022 @01:36AM (#31515004)
Wow I never knew this.
[ Parent | on HN ]
Re:FTC fines Twitter $150M for using 2FA phone numbers for a... by happyopossum on Wednesday May 25, 2022 @09:28PM (#31513165)
That’s up to the developer, it’s not a requirement of TOTP apps.
[ Parent | on HN ]