News for hackers. Stuff that matters.

A comment on Recent 'MFA Bombing' Attacks Targeting Apple Users. Parent comment

Re:Recent 'MFA Bombing' Attacks Targeting Apple Users by someguydave on Wednesday March 27, 2024 @09:20AM (#39838667)
But is it the case that the Yubikey is essentially treated the same as a trusted device? What if I want to untrust my devices and only trust ubikeys (without removing the device from my icloud account?)
[ Parent | on HN ]
Re:Recent 'MFA Bombing' Attacks Targeting Apple Users by antihero on Wednesday March 27, 2024 @10:51AM (#39840004)
I don’t seem to have the push option now
[ Parent | on HN ]
Re:Recent 'MFA Bombing' Attacks Targeting Apple Users by someguydave on Wednesday March 27, 2024 @01:09PM (#39841794)
Yes but my understanding is that you can remove the Yubikey without possessing it, just with a “trusted device”. I want to mark all of my devices untrusted (wrt icloud account changes) and rely only on Yubikeys
[ Parent | on HN ]