One thing that really annoys me is sites that let you use a TOTP authenticator app for #2FactorAuthentication, but insist you set up 2FA by SMS first before they let you set up the TOTP. That kinda defeats the point of not having the SMS method available because it's spoofable...

I really don't want to go back to Authy but I will if I have to. #2fa #2FactorAuthentication #AppleWatch

What are people using for a 2FA app these days on their iPhone/Apple Watch? I’m going to have to get rid of Okta Verify because they just discontinued their excellent Apple Watch app. #okta #2FactorAuthentication #2fa #AppleWatch #iPhone

🎬 So this scam #2FA app is using custom product pages of Apple Search Ads to trick users. It has different campaigns per search keywords. When searching for "Microsoft Authenticator", it shows screenshots highlighting "Microsoft". and when searching for "Google Authenticator", it highlights "Google". Watch the video 🤯

It's worth noting that custom product pages need to be approved by @AppStore Connect and Apple Search Ads.
This app steals 2FA secrets and its model is very suspicious as noted below.

Friendly reminder: Mastodon uses no algorithms for discovering posts. The only way to spread the word is by boosting posts. If you think this post is helpful, boost it to reach others. Thank you 🙏
#Privacy #Apple #iOS #cybersecuritytips #infosec #cybersecurity #security #2FactorAuthentication

The rogue 2FA app that steals scanned secrets is now ranked 18 on the German App Store for the productivity category. No wonder! The app disguises as a Microsoft app. It is the top hit when you search for "Microsoft Authenticator" and the developer has updated the screenshots in the ad card to highlight the word "Microsoft". Surprisingly, the product page of the app shows different screenshots with the word "Microsoft" removed.
The app now has 1.2K reviews, as opposed to 18 when we first addressed the app.

#privacy #security #2FactorAuthentication #iOS #infosec

Ist es eigentlich normal, dass man bei #Peertube bei der Aktivierung von #2FA keine #Wiederherstellungscodes angezeigt bekommt?

#Fediverse #2FactorAuthentication #2FaktorAuthentifikation

A very nice article about the phenomenon of scam authenticator apps

"In fact, an app that uploads your seeds to a server anywhere in the world is either so incompetent that you should stop using it immediately, or so untrustworthy that you should treat it as cybercriminal malware."

#Cybersecurity #Privacy #InfoSec #2FA #2FactorAuthentication

https://nakedsecurity.sophos.com/2023/02/27/beware-rogue-2fa-apps-in-app-store-and-google-play-dont-get-hacked/

[1] @mart @mysk.
#authenticator #2FactorAuthentication

• Aegis (Android & F-Droid)
App doesn’t connect to internet and requires only strict necessary permissions. Backup to Nextcloud and others (https://reports.exodus-privacy.eu.org/en/reports/316513/#permissions ).

• Ente (Android & IOS, and desktop is a work in progress).
App requires more permissions (https://reports.exodus-privacy.eu.org/en/reports/io.ente.auth/latest/)

OTP Auth (IOS & Mac)
iCloud sync ->

Am I reading this wrong, pr are they only offering 2 factor authentication to paying customers moving forward?

#Meta #Facebook #Instagram #2factorauthentication

Why are people freaking out about Twitter promoting them to change from sms-based #2FactorAuthentication to app-based #2FA? App-based is actually better! I’ve used it from day one.

(this is not my screenshot. I borrowed it)

@MonicaBooth The most confusing thing is that SMS is not the most secure option for 2FA due to possibilities for sim swapping and other vulnerablitied. Authentification apps are recommended by security experts. So he is keeping the worse option for paying users? So weird

#ElonMusk #TwitterNews #2fa #2factorauthentication #birdapp

I wonder if any #passwordmanager like #lastpass or #bitwarden are planning yet for #postquantum #quantumcomputing threats?
And as a nontechnical consumer, I’m wondering: will #2fa #2factorauthentication protect one from a #quantum attack?

Does anyone have negative feedback about #BitWarden ? Issues we should be aware of ?

#passwordmanager #2fa #2FactorAuthentication

Took me a minute but here’s how to get #2fa on mastodon #2factorauthentication.
1. Settings
2. Boring Stuff
3. Hamburger, upper right
4. Account Settings

@davidgerard reporting #Twitter is blocking #2FactorAuthentication on #UK #vodafone and possibly also #Three. His suggestion that #Musk has confused UK with #ukraine is, frankly, not implausible https://davidgerard.co.uk/blockchain/2022/12/16/twitters-decline-continues-follow-me-on-mastodon/

#followerpower
Ich bin auf der Suche nach einer #2FactorAuthentication App für Android. Gerne auch aus dem @fdroidorg App Store. Wer hat da gute Erfahrungen mit welcher App gemacht? #hilfetröt