Twilio Confirms Data Breach After Hackers Leak 33M Authy User Phone Numbers

Re:Twilio Confirms Data Breach After Hackers Leak 33M Authy ... by udev4096 on Thursday July 04, 2024 @11:02PM (#40879548)

Well, phishing attacks are still prevelent and it's still at the top for compromising credentials. And phishing attacks have evolved. Most of them will hijack your session, which will make TOTP useless (FIDO will protect you tho)

[ Parent | on HN ]

Re:Twilio Confirms Data Breach After Hackers Leak 33M Authy ... by jeromegv on Thursday July 04, 2024 @11:25PM (#40879622)

I just don’t buy the argument that because most sophisticated attacks exist, then 2FA isn’t useful.

2FA protects you from someone getting access to a leaked password. They still can’t connect even with user and password, without doing a very elaborate hack. That’s a huge benefit.

[ Parent | on HN ]