A security breach exposed two-factor authentication (2FA) codes/password reset links for millions of users on platforms like Facebook, Google, and TikTok.

Key Points:

  • YX International, an SMS routing company, left an internal database exposed online without a password.
  • The database contained one-time 2FA codes and password reset links for various tech giants.
  • YX International secured the database and claims to have “sealed the vulnerability.”
  • The company wouldn’t confirm how long the database was exposed or if anyone else accessed it.
  • Representatives from Meta, Google, and TikTok haven’t commented yet.

Concerns:

  • This leak highlights the vulnerabilities of SMS-based 2FA compared to app-based methods.
  • The lack of information regarding the leak’s duration and potential access by others raises concerns.

Gemini Recommendations:

  • Consider switching to app-based 2FA for increased security.
  • Be cautious of suspicious communications and avoid clicking unknown links.
  • Stay informed about potential security breaches affecting your online accounts.
You are viewing a single thread.
View all comments View context
-42 points
*
Removed by mod
permalink
report
parent
reply
23 points
*

Bro, I literally don’t even understand your malfunction, lol. I don’t at this point even know what I said you think is so wild. Lots of really important businesses and services still only allow for for SMS or email OTP delivery. If you find that for the most part that sentiment doesn’t apply to you because your day to day account spread differs, more power to you.

permalink
report
parent
reply
4 points

The problem is he doesn’t know what “SMS” or “OTP” means.

permalink
report
parent
reply
2 points
*

There seems to be a trend with certain people of always asking to “cite your sources” on every goddamn thing. Then when you refuse, they’ll trot out “extraordinary claims require extraordinary evidence”, and your only claim is that you bought a sandwich yesterday.

Worst way to “win” an Internet fight.

permalink
report
parent
reply
-13 points
Removed by mod
permalink
report
parent
reply
1 point

You’re either playing a fool to try to rustle my jimmies, or you genuinely have exceeded your FRESHEST IF USED BY date. It bores me, so I’m just going to block you.

permalink
report
parent
reply
17 points

Nor should anyone, especially when you accuse anyone who questions you with lying simply for challenging your position.

Nah, his responses are fine. The real problem here is just that you lack reading comprehension skills and are being a jerk for no reason.

permalink
report
parent
reply
0 points
Removed by mod
permalink
report
parent
reply
5 points

It’s funny how you don’t realize that you’re describing yourself to everyone else while talking with someone who is clearly much more inform that you could ever hope to be.

You don’t need to go agro over someone’s anecdotal comment. Makes you look like an unhinged idiot.

permalink
report
parent
reply
-5 points
Removed by mod
permalink
report
parent
reply
0 points

Not really, just tired of seeing ignorant comments posted by unhinged idiots who don’t know what they’re talking about in regards to a field I’m rather knowledgeable in.

In the end, I don’t care what you think because you’re wrong and very obviously uninformed, and just lashing out at people smarter than you who aren’t willing to spoon-feed you information you could easily Google based on, again, a comment that was explicitly anecdotal.

If you had put forth even a modicum of your own effort instead of acting unhinged, you would have seen that this is a common complaint about financial institutions. But keep going off on uneducated and uninformed rants, makes you look suuuuuuuper smart.

permalink
report
parent
reply

Technology

!technology@lemmy.world

Create post

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


Community stats

  • 17K

    Monthly active users

  • 12K

    Posts

  • 543K

    Comments