News for hackers. Stuff that matters.

A comment on Make Your Email Hacker Proof.

Re:Make Your Email Hacker Proof by my8bird on Tuesday April 17, 2012 @11:10PM (#3856276)
While I like 2 step authentication I wish Google would get rid of SMS password reset. With this enabled all a person needs is your phone to gain access to your account. Given that police can grab you phone whenever you are stopped this means they can "hack" your account at the same time. Another example could be a cleaning person at a hotel finding your phone. Just two examples off the top of my head. Basically, SMS password reset makes your phone the golden key.

http://support.google.com/accounts/bin/answer.py?hl=en&a...

[ Parent | on HN ]
Re:Make Your Email Hacker Proof by smiler on Wednesday April 18, 2012 @04:05AM (#3856985)
As long as you have a pin lock on your phone, the cleaning person nor the police will be able to do anything with your phone.
[ Parent | on HN ]
Re:Make Your Email Hacker Proof by sp332 on Wednesday April 18, 2012 @10:41AM (#3858150)
It's not that hard for law enforcement to get your PIN. e.g. http://blog.agilebits.com/2012/03/30/the-abcs-of-xry-not-so-...
[ Parent | on HN ]
Re:Make Your Email Hacker Proof by jamesgeck0 on Wednesday April 18, 2012 @09:55AM (#3857901)
What about if the phone can be rooted?
[ Parent | on HN ]