News for hackers. Stuff that matters.

A comment on Recent 'MFA Bombing' Attacks Targeting Apple Users. Parent comment

Re:Recent 'MFA Bombing' Attacks Targeting Apple Users by jareklupinski on Wednesday March 27, 2024 @10:47AM (#39839932)
> lose the key and no one can get you back in to your account

sounds like a feature

"want to totally restart your entire digital life? just rip up your key :) never worry about something from your past coming back to you ever again!

[ Parent | on HN ]
Re:Recent 'MFA Bombing' Attacks Targeting Apple Users by bilbo0s on Wednesday March 27, 2024 @12:46PM (#39841514)
Only if you do everything at Apple.

You make posts on twitter, it's not protected the same way.

[ Parent | on HN ]
Re:Recent 'MFA Bombing' Attacks Targeting Apple Users by dylan604 on Wednesday March 27, 2024 @01:07PM (#39841770)
I want to be upset that you've made a comment so obvious, yet sadly, there will be people in the wild that don't understand the silos platforms build. However, I doubt any of them are here reading this, but you never know.
[ Parent | on HN ]
Re:Recent 'MFA Bombing' Attacks Targeting Apple Users by hedora on Wednesday March 27, 2024 @02:22PM (#39842769)
Go read any thread about passkeys. :-)
[ Parent | on HN ]
Re:Recent 'MFA Bombing' Attacks Targeting Apple Users by headmelted on Wednesday March 27, 2024 @12:56PM (#39841619)
That seems like the worst option. Everything up to the free tier would stay there forever with no way for you to ever request it to be deleted.
[ Parent | on HN ]
Re:Recent 'MFA Bombing' Attacks Targeting Apple Users by sgjohnson on Wednesday March 27, 2024 @03:58PM (#39843853)
Turn on Advanced Data Protection before you rip up the key. Then it's all as good as deleted.
[ Parent | on HN ]
Re:Recent 'MFA Bombing' Attacks Targeting Apple Users by headmelted on Thursday March 28, 2024 @02:46PM (#39855804)
That’s a rather generous assumption.

Do Apple definitely not retain a key? If they don’t is the encryption quantum secure?

[ Parent | on HN ]
Re:Recent 'MFA Bombing' Attacks Targeting Apple Users by sgjohnson on Monday April 01, 2024 @10:03AM (#39894300)
> Do Apple definitely not retain a key?

If this is the threat vector you’re worried about, you shouldn’t have had anything in iCloud (or any cloud for that matter) to begin with, rendering this debate completely moot.

[ Parent | on HN ]