How Google Authenticator made one company’s network breach much, much worse

Malcontent · Sep 15, 2023

A security company is calling out a feature in Google’s authenticator app that it says made a recent internal network breach much worse.

Google's app for generating MFA codes syncs to user accounts by default. Who knew?
Click to expand...

How Google Authenticator made one company’s network breach much, much worse

Rasheed187 · Sep 16, 2023

OK so the ''MFA code syncing'' feature is apparently pretty dangerous in certain circumstances. Authy does indeed allow to block adding extra devices.

What’s more, enrolling a new device in Authy requires both (1) access to either an already-enrolled device or control of the phone number associated with the Authy account and (2) the password that encrypts the codes. Authy also allows users to flip a switch that prevents any new devices from being enrolled. These protections are a key selling point for the app.
Click to expand...

Log in or Sign up

How Google Authenticator made one company’s network breach much, much worse

Malcontent Registered Member

Rasheed187 Registered Member

Log in or Sign up

How Google Authenticator made one company’s network breach much, much worse

Malcontent Registered Member

Rasheed187 Registered Member

Useful Searches