News for hackers. Stuff that matters.

A comment on Gmail 2FA causes the homeless to permanently lose access 3 times a year. Parent comment

Re:Gmail 2FA causes the homeless to permanently lose access ... by ranger_danger on Friday October 07, 2022 @10:02AM (#33121454)
Google only allows non-U2F 2FA methods (like TOTP) to be enabled AFTER enabling a hardware U2F device. And signing up without a working mobile number is impossible. Anyone who says that's not true hasn't actually tried in the last several years.
[ Parent | on HN ]
Re:Gmail 2FA causes the homeless to permanently lose access ... by nyuszika7h on Friday October 07, 2022 @10:19AM (#33121686)
I definitely had TOTP before I had U2F. I think you mean after enabling SMS 2FA, not U2F.
[ Parent | on HN ]
Re:Gmail 2FA causes the homeless to permanently lose access ... by ranger_danger on Tuesday October 18, 2022 @10:04AM (#33247307)
Nope, while I also did have TOTP before U2F (because it wasn't even a thing then), the rules changed to where if you don't have a phone number on your account, then you're required to enroll a U2F device before you can turn on TOTP.
[ Parent | on HN ]