News for hackers. Stuff that matters.

A comment on Coinbase Tells User Missing $96,000 After Security Breach Is His Problem. Parent comment

Re:Coinbase Tells User Missing $96,000 After Security Breach... by wmf on Monday March 06, 2023 @11:43PM (#35051663)
Usually they do the SIM swap first, use SMS to recover email, then use email+SMS to recover Coinbase. I agree that Coinbase could do more.
[ Parent | on HN ]
Re:Coinbase Tells User Missing $96,000 After Security Breach... by m00x on Tuesday March 07, 2023 @02:29AM (#35052585)
Like supporting TOTP?

https://help.coinbase.com/en/coinbase/getting-started/verify...

[ Parent | on HN ]
Re:Coinbase Tells User Missing $96,000 After Security Breach... by 2fast4you on Tuesday March 07, 2023 @02:38AM (#35052647)
Like forcing TOTP
[ Parent | on HN ]
Re:Coinbase Tells User Missing $96,000 After Security Breach... by jkepler on Tuesday March 07, 2023 @09:57AM (#35056028)
The fact that Coinbase offers 2FA via an app is already potentially more secure than most US banks.

It would be far better if Coinbase defeated to TOTP for 2FA.

[ Parent | on HN ]