Even with 2FA, Google accounts can be hacked with just a phone number

Re:Even with 2FA, Google accounts can be hacked with just a ... by philip1209 on Friday October 31, 2014 @09:08PM (#8541864)

This sounds like an argument for adding hardware multi-factor auth in google. It's not a panacea, but a good starting point that can't be easily spoofed or hijacked.

[ Parent | on HN ]

Re:Even with 2FA, Google accounts can be hacked with just a ... by mynameisvlad on Friday October 31, 2014 @09:11PM (#8541870)

They already have it: https://support.google.com/accounts/answer/6103523?hl=en

And it adds nothing, since it still has fallbacks to the existing systems.

[ Parent | on HN ]

Re:Even with 2FA, Google accounts can be hacked with just a ... by asuffield on Friday October 31, 2014 @10:06PM (#8541969)

You should be able to remove less secure authentication mechanisms via accounts.google.com, after setting up a security key

[ Parent | on HN ]

Re:Even with 2FA, Google accounts can be hacked with just a ... by noisy_boy on Saturday November 01, 2014 @01:51PM (#8543894)

You still need to keep atleast one backup method in case the security key is corrupted/broken/lost etc.

[ Parent | on HN ]

Re:Even with 2FA, Google accounts can be hacked with just a ... by asuffield on Saturday November 01, 2014 @06:31PM (#8544866)

Print out a recovery code and keep it somewhere safe.

[ Parent | on HN ]

Re:Even with 2FA, Google accounts can be hacked with just a ... by pngai on Sunday November 02, 2014 @01:58AM (#8545912)

You can have two or more security keys associated with your account on Google.

[ Parent | on HN ]

Re:Even with 2FA, Google accounts can be hacked with just a ... by mynameisvlad on Monday November 03, 2014 @01:38AM (#8549615)

Oh really? I thought that it forced you to go back to the app if you use a non-U2F browser.

[ Parent | on HN ]