ezofox on Nostr: The Google Authenticator feature recently added to allow cross device synchronization ...
The Google Authenticator feature recently added to allow cross device synchronization of 2FA secrets was analyzed and found not end-to-end encrypted. This means Google can see the secrets + the online services associated with those even while stored on their servers. No option to secure this at the moment.
https://nitter.net/mysk_co/status/1651021165727477763Published at
2023-04-26 02:25:18Event JSON
{
"id": "4a85a20f1392e7ee2cb1c15fd8d8f23be373da2035f680fe926a1d50e3152182",
"pubkey": "d4843f4c280abba3d43d84ed7924b2567d7c166f5e72985b9f06d355601b5d78",
"created_at": 1682475918,
"kind": 1,
"tags": [],
"content": "The Google Authenticator feature recently added to allow cross device synchronization of 2FA secrets was analyzed and found not end-to-end encrypted. This means Google can see the secrets + the online services associated with those even while stored on their servers. No option to secure this at the moment.\n\nhttps://nitter.net/mysk_co/status/1651021165727477763\n\n",
"sig": "2e3f76e236ac0accf9567f370c4b6e1eedae1801f28dee4604cde2e2545958c380409248765d4f257709dbe12d01f7147104b8dd3b504b896ccda1449233e5d6"
}
