News for hackers. Stuff that matters.

A comment on Google hacked account. Parent comment

Re:Google hacked account by probably_wrong on Tuesday June 30, 2015 @09:07AM (#9804876)
Except that now Google has my phone number linked to my identity too. I know this is not everyone's use case, but for those of us that care deeply about privacy, that's not a good alternative.

If that's not a good counterpoint, my phone/SMS service sucks when I'm traveling abroad, which is exactly when Google thinks I'm not me.

I wish Google supported TOTP like Github does, without asking for a phone number.

[ Parent | on HN ]
Re:Google hacked account by tetrep on Tuesday June 30, 2015 @09:18AM (#9804943)
> I wish Google supported TOTP like Github does... Goid nees, they do! They even have an app for it.

https://en.m.wikipedia.org/wiki/Google_Authenticator

[ Parent | on HN ]
Re:Google hacked account by probably_wrong on Tuesday June 30, 2015 @11:00AM (#9805726)
Yes, they do, but there's no way to set it up without giving your phone number first. Whenever I enter into the 2FV options, I have to give a phone number, no alternative. I have no idea why. Sorry I wasn't clear enough.
[ Parent | on HN ]
Re:Google hacked account by nadams on Tuesday June 30, 2015 @10:18AM (#9805364)
And a PAM module!
[ Parent | on HN ]
Re:Google hacked account by hbz on Tuesday June 30, 2015 @02:38PM (#9807498)
Are you sure that's still the case?

This[1] would seem to indicate you can use a U2F device[2] as an alternative to providing a cell phone for verification.

[1] https://www.google.com/landing/2step/#tab=how-it-works

[2] http://googleonlinesecurity.blogspot.com/2014/10/strengtheni...

[ Parent | on HN ]
Re:Google hacked account by probably_wrong on Tuesday June 30, 2015 @06:08PM (#9808744)
My guess is that you can eventually enable that, but not at first. When I click on the "get started" button, I get "Step 1: Set up your phone", with no alternative button in sight.
[ Parent | on HN ]
Re:Google hacked account by JupiterMoon on Tuesday June 30, 2015 @09:14AM (#9804920)
Does gmail support using a second email as the second factor? Hotmail does...
[ Parent | on HN ]
Re:Google hacked account by mondoshawan on Tuesday June 30, 2015 @09:49AM (#9805148)
The entire account system does.
[ Parent | on HN ]