News for hackers. Stuff that matters.

A comment on Ask HN: Carrier “lost” my number in a port request. Parent comment

Re:Ask HN: Carrier “lost” my number in a port request by tjoff on Wednesday November 02, 2022 @09:49AM (#33435713)
Yeah the whole setup is completely broken, which forces them to build backdoors for when it breaks which completely defeats the purpose of 2FA to begin with.
[ Parent | on HN ]
Re:Ask HN: Carrier “lost” my number in a port request by twawaaay on Wednesday November 02, 2022 @10:44AM (#33436637)
No, it is not broken.

You just make cloned yubikeys. You can't read data from the key, but you can initialise it with your own data and you can initialise more than one with the same payload.

[ Parent | on HN ]
Re:Ask HN: Carrier “lost” my number in a port request by tjoff on Wednesday November 02, 2022 @12:35PM (#33438605)
And how do you do that with U2F?
[ Parent | on HN ]