News for hackers. Stuff that matters.

A comment on The ability to reset your iCloud password with a keycode is a security flaw.

Re:The ability to reset your iCloud password with a keycode ... by warning26 on Sunday November 13, 2022 @06:48PM (#33588600)
Definitely a good reminder to use a secure passcode for your phone. (And to definitely avoid the 4-digit pincode.)

I suppose realistically since your phone is almost always the "second factor" in 2FA, if your phone is stolen+compromised you're completely screwed. Do there exist 2FA solutions that don't become 1FA if it's just your phone?

[ Parent | on HN ]
Re:The ability to reset your iCloud password with a keycode ... by gkiely on Sunday November 13, 2022 @07:13PM (#33588768)
Agreed, I updated my passcode to an alphanumeric after this happened.

I am not aware of such solutions but would be interested to learn more if there are.

[ Parent | on HN ]