Re:Facebook for Android and Why Zuckerberg now owns your ass
by jrs235 on Monday April 07, 2014 @11:38AM
(#7547112)
"we require that so we can automatically intercept login approvals SMS messages for people that have turned 2-factor authentication for their accounts"
Wait, how does that work?
Doesn't that kind of break 2 form authentication?
If no input is required by the user then it's pointless. If I hack your account and Facebook sends your phone an SMS to authenticate but the Facebook App automatically "intercepts" and reads the SMS message and says "Yup! It's good!" What's the point in sending the SMS message? Think about that for a moment. Why not just send a request to my smart toaster and have my smart toaster just reply "Yup, I got your message!"
Wait, how does that work?
Doesn't that kind of break 2 form authentication?
If no input is required by the user then it's pointless. If I hack your account and Facebook sends your phone an SMS to authenticate but the Facebook App automatically "intercepts" and reads the SMS message and says "Yup! It's good!" What's the point in sending the SMS message? Think about that for a moment. Why not just send a request to my smart toaster and have my smart toaster just reply "Yup, I got your message!"
Am I missing something?