Re:Vitalik Buterin reveals X account hack was caused by SIM-...
by londons_explore on Tuesday September 12, 2023 @09:52AM
(#37481290)
Except Google. Google backup codes are near useless because a Google backup code will let you log in, but won't allow you to disable 2 factor or add a new 2 factor device - meaning if you ever lose a 2 factor device and have to use a backup code, there is no way to recover your account.
[ Parent
| on HN ]
Re:Vitalik Buterin reveals X account hack was caused by SIM-...
by lxgr on Tuesday September 12, 2023 @10:13AM
(#37481610)
Really? I'd imagine you'd need two codes (one for the login, one for access to your 2FA settings), but not being able to recover at all using them seems horrible!
Re:Vitalik Buterin reveals X account hack was caused by SIM-...
by londons_explore on Tuesday September 12, 2023 @10:36AM
(#37481978)
It just gives some error like "this login method is not allowed for this action" or similar.
Re:Vitalik Buterin reveals X account hack was caused by SIM-...
by msm_ on Tuesday September 12, 2023 @08:40PM
(#37490688)
Interesting. I can't confirm though - I personally changed my 2FA device 2 weeks ago using a backup code. I couldn't find old yubikey that I used as 2FA for google, decided to regain access with a backup code and add my new yubikey, and it worked flawlessly. It probably helped that I used the same machine as always. Google does a lot of undocumented heuristics in the background, and you either get additional verification or not.
Re:Vitalik Buterin reveals X account hack was caused by SIM-...
by qingcharles on Tuesday September 12, 2023 @09:19PM
(#37490974)
Yes, same machine helped, it's definitely one of the factors it uses.
I have a near-20-year Google account I can't access because I lost the 2FA number. I have the username, password and recovery email. But that isn't enough, apparently.