4th Street Bar Hive-Bar

Hive-Bar Powered by Hive beta-fdb5b5b

Community post

Do you use two-factor authentication...?

  1. This post will unlock the reality behind two-factor authentication.   

It is where you log in with a password.      �KS���

 https://support.tinkercad.com/hc/en-us/article_attachments/211274447/Screen_Shot_2016-08-31_at_9.52.49_AM.png 

And a unique code is sent to you for second login attempt.   

https://support.couchsurfing.org/hc/en-us/article_attachments/204002128/Stay_with_Locals_and_Make_Travel_Friends___Couchsurfing.jpg   

Many of these codes are sent as text o your phone.   

https://drfone.wondershare.com/images/others/forward-text-on-iphone-and-android-5_1098.jpg   

This cold be a problem..... Because your phone number is the weakest link in this process.   

https://duo.com/assets/img/documentation/authproxy/radius-network-diagram.png   

Ever move your phone number from one sim to another?   Phone providers only requires a few details to do this for you.    

Credit card number 

Old Address 

Last four digits of SSN    

These details are often seen in large database leaks. If a malicious attacker has this info they can have the phone carrier and migrate your number to another sim.   

If they get through the first login screen of an account the code gets sent to their sim with your number.   

Image    

It happened to blacks lives matter activist ''Deray Mackesson''.     There a few options that offer a more secure exchange.  

http://image.techtimes.com/data/images/full/251197/deray-mckesson.jpg

Google offers an option called Google prompt

https://images.techhive.com/images/article/2016/06/google-prompt-100667567-large.jpg

While aps like Authy generates there own codes and integrate with Facebook,  Amazon, Dropbox and more. 

Physical devices like Yubikey are also an option. 

https://fidoalliance.org/wp-content/uploads/YubiKey-4-In-Use-2.png

Their are USB devices are required to login.

This makes hijacking any of your accounts very difficult.  

Check your important accounts they may offer two-factor alternatives

Please Upvote if you like the post and feel free to share your ideas Via comments. 

Thanks. 




1 upvotes $0.00

Replies (0)

Conversation

No replies yet

Replies will appear here as people join the conversation.

Review before signing

Posting as . Signing with . Keychain permission: Posting. Hive Keychain will ask you to approve this action next.


  
Technical details

Operation fingerprint: