Technology

59587 readers

2940 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each another!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago

MODERATORS

Authy got hacked, and 33 million user phone numbers were stolen (appleinsider.com)

submitted 4 months ago by SandbagTiara2816@lemmy.dbzer0.com to c/technology@lemmy.world

161 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] TheEighthDoctor@lemmy.world 0 points 4 months ago (4 children)

I started using Authy instead of GA because every time I changed the ROM on my phone I would lose all codes, because I would forget every time.

[–] I_Clean_Here@lemmy.world 0 points 4 months ago

This isn't about you and your silly follies

[–] Lem453@lemmy.ca 0 points 4 months ago

Use aegis, export the keys and then reimport them every time you switch. Trusting your second factor to a cloud is a disaster waiting to happen.

If you want to get fancy setup your own cloud server (nextcloud, Seafile, owncloud etc) and set the backup folder for aegis to the self hosted cloud for easy restore every time you switch ROMs.

[–] laurelraven@lemmy.blahaj.zone 0 points 4 months ago (1 children)

I've started putting mine into my Bitwarden vault as well as Google auth, mainly because I'm a bit paranoid I'll wind up locked out of something by trusting a second factor too much

[–] Coreidan@lemmy.world 0 points 4 months ago (1 children)

With password recovery you shouldn’t be getting locked out of anything. I don’t see this being a risk.

[–] laurelraven@lemmy.blahaj.zone 0 points 4 months ago

Password recovery is itself a weakness in the system

And I did call myself paranoid for it...

[–] dev_null@lemmy.ml 0 points 4 months ago (1 children)

GA now backups your codes in your Google account, so this doesn't happen anymore.

[–] ruse8145@lemmy.sdf.org 0 points 4 months ago (1 children)

They had an obvious solution which is export to an encrypted text files and went with the option that lowers your security

[–] dev_null@lemmy.ml 0 points 4 months ago

Google usually goes with the lowest common denominator solution. There is a staggering amount of people who don't know what is a file, let alone that phones have any.