News for hackers. Stuff that matters.

A comment on Tell HN: It is impossible to disable Google 2FA using backup codes. Parent comment

Re:Tell HN: It is impossible to disable Google 2FA using bac... by notpushkin on Thursday January 19, 2023 @02:46PM (#34444686)
Android phones are encrypted by default, but for encryption, they use the same PIN as your lock screen. There's some command you could run to replace it with a strong password while keeping screen lock PIN simple, but it didn't work for me last time I tried.
[ Parent | on HN ]
Re:Tell HN: It is impossible to disable Google 2FA using bac... by mr_mitm on Friday January 20, 2023 @05:43AM (#34451210)
Surely the data is encrypted using a 128 bit key or better, and the key is stored on some secure enclave which rate limits PIN entries, is it not?
[ Parent | on HN ]
Re:Tell HN: It is impossible to disable Google 2FA using bac... by notpushkin on Tuesday January 24, 2023 @02:33AM (#34500576)
> Surely the data is encrypted using a 128 bit key or better

I think so, yeah.

> and the key is stored on some secure enclave which rate limits PIN entries, is it not?

That – I'm not so sure about. I didn't really think about it too much before you pointed it out, but it would make sense for the Android floks to have implemented it. I'll look into it a bit later!

[ Parent | on HN ]