I DID warn about this! - How Google Authenticator made one company's
network breach much, much worse
When Google enabled default syncing of authenticator via the cloud, I warned
of the risks, noted that I was disabling this "feature", and suggested that
everyone else do the same. Now you see one reason why. While this story
is complex, it's clear that Authenticator did make a bad situation much
worse, and Google's "net positive" argument really does not fly for anyone
who gets burned. -L
https://arstechnica.com/security/2023/09/how-google-authenticator-gave-attackers-one-companys-keys-to-the-kingdom/
- - -
--Lauren--
Lauren Weinstein
[email protected] (https://www.vortex.com/lauren)
Lauren's Blog: https://lauren.vortex.com
Twitter: https://twitter.com/laurenweinstein
Mastodon: https://mastodon.laurenweinstein.org/@lauren
T2: https://t2.social/laurenweinstein
Founder: Network Neutrality Squad: https://www.nnsquad.org
PRIVACY Forum: https://www.vortex.com/privacy-info
Co-Founder: People For Internet Responsibility
Tel: +1 (818) 225-2800
_______________________________________________
pfir mailing list
https://lists.pfir.org/mailman/listinfo/pfir