News for hackers. Stuff that matters.

A comment on Google Authenticator cloud sync/backup is not E2E encrypted. Parent comment

Re:Google Authenticator cloud sync/backup is not E2E encrypted by gleenn on Tuesday April 25, 2023 @11:16PM (#35709329)
It's 2FA so it would only get them half way there right?
[ Parent | on HN ]
Re:Google Authenticator cloud sync/backup is not E2E encrypted by db3pt0 on Tuesday April 25, 2023 @11:21PM (#35709359)
> In many cases they are already syncing a copy of your passwords.

No, that gets them the full way there. They have your 2FA codes, and if you use Chrome and opt into it syncing passwords for you (passwords.google.com), this gives them both pieces of the puzzle.

[ Parent | on HN ]
Re:Google Authenticator cloud sync/backup is not E2E encrypted by cleanchit on Wednesday April 26, 2023 @12:40AM (#35709696)
If you use chrome, they could just download your cookies if they really wanted to.
[ Parent | on HN ]