When MFA isn't MFA, or how we got phished(retool.com)
333 points by dvdhsu | 240 comments
Retool blog post describing a phishing attack on its employees and how Google Authenticator cloud sync undermined multi-factor authentication.
#google-authenticator on Hacker News
3 stories tagged google-authenticator, newest first.
Google Authenticator cloud sync: Google can see the secrets, even while stored(defcon.social)
334 points by Signez | 112 comments
A Mastodon post by Mysk reporting that Google Authenticator's new cloud sync of 2FA secrets is not end-to-end encrypted, so Google can see the secrets.
Google Authenticator now supports Google Account synchronization(security.googleblog.com)
412 points by ortusdux | 297 comments
Google Security Blog post announcing that Google Authenticator can now back up and sync one-time codes across devices via Google Accounts.