Re:Ask HN: Carrier “lost” my number in a port request
by beaviskhan on Wednesday November 02, 2022 @09:27AM
(#33435390)
You can't have multiple yubikeys associated with your AWS account! And you can't have a yubikey as primary and a software authenticator as a backup, for example. It's a huge hole in their operation imo. Even comparatively unimportant apps such as Facebook allow you to associate as many hardware tokens as you like, fallback to authenticator or SMS, etc.
[ Parent
| on HN ]
Re:Ask HN: Carrier “lost” my number in a port request
by tjoff on Wednesday November 02, 2022 @09:49AM
(#33435713)
Yeah the whole setup is completely broken, which forces them to build backdoors for when it breaks which completely defeats the purpose of 2FA to begin with.
Re:Ask HN: Carrier “lost” my number in a port request
by twawaaay on Wednesday November 02, 2022 @10:44AM
(#33436637)
No, it is not broken.
You just make cloned yubikeys. You can't read data from the key, but you can initialise it with your own data and you can initialise more than one with the same payload.