Re:Recent 'MFA Bombing' Attacks Targeting Apple Users
by robmccoll on Wednesday March 27, 2024 @09:04AM
(#39838523)
You could split the key a few ways if you don't want to trust that one of your stores won't be compromised https://en.m.wikipedia.org/wiki/Shamir%27s_secret_sharing
Re:Recent 'MFA Bombing' Attacks Targeting Apple Users
by IncreasePosts on Wednesday March 27, 2024 @12:59PM
(#39841664)
Or, just apply some simple, easy to remember permutation to the key that no one would be likely to guess - eg rot13 the key, or add 1 to every character, move the first 14 characters of the key to the end of the key, etc.
Re:Recent 'MFA Bombing' Attacks Targeting Apple Users
by e40 on Wednesday March 27, 2024 @09:55AM
(#39839134)
> Particularly 1Password which I think is a pattern if I remember correctly.
What does that mean?
Re:Recent 'MFA Bombing' Attacks Targeting Apple Users
by hackinthebochs on Wednesday March 27, 2024 @10:07AM
(#39839301)
Probably that the key has features that allows 1Password (and potentially anyone) to recognize that its a 1Password key. E.g. Fixed size, patterns of spaces or dashes, specific digits, embedded error correction, etc.
Re:Recent 'MFA Bombing' Attacks Targeting Apple Users
by nerdjon on Wednesday March 27, 2024 @11:47AM
(#39840794)
Yeah that is what I mean.
Similar to how a lot of package companies have a certain pattern, length, whatever for their tracking numbers. If there was a somewhat reliable way to say "This is a 1Password key" or "This is an iCloud key" it makes it means even without context it could be an issue.
I think I might need to look up to see if there is a known pattern to these keys that it could be easily figured out what it is even if it is just on a sheet with no context. Particularly 1Password which I think is a pattern if I remember correctly.