Leebra security
login register

When MFA isn't actually MFA

3 years ago by TheCee to c/security

save

share

report

wyrmroot 6 points 3 years ago

Google recently released the Google Authenticator synchronization feature that syncs MFA codes to the cloud … if your Google account is compromised, so now are your MFA codes.

Wow, what an awful idea. Reduces the authenticator app right back to the “my email is my second factor for everything” level of security.

save

path: 0 3524141, hotness: undefined, score: 6, children: 0
Nefrace 2 points 3 years ago

Just... why? Didn't we already learned that cloud based password managers are stupid? That's why I'm using my own instance of Vaultwarden on my own home server

save

path: 0 3524815, hotness: undefined, score: 2, children: 0
security
security

@programming.dev

login for more options
2202
173
93

A community for discussion about cybersecurity, hacking, cybersecurity news, exploits, bounties etc.

Rules :

  1. All instance-wide rules apply.
  2. Keep it totally legal.
  3. Remember the human, be civil.
  4. Be helpful, don't be rude.

Icon base by Delapouite under CC BY 3.0 with modifications to add a gradient

go to feed...