Android

17735 readers

51 users here now

The new home of /r/Android on Lemmy and the Fediverse!

Android news, reviews, tips, and discussions about rooting, tutorials, and apps.

💡Content Philosophy:

Content which benefits the community (news, rumours, and discussions) is generally allowed and is valued over content which benefits only the individual (technical questions, help buying/selling, rants, self-promotion, etc.) which will be removed if it's in violation of the rules.

Support, technical, or app related questions belong in: [email protected]

For fresh communities, lemmy apps, and instance updates: [email protected]

💬Matrix Chat

💬Telegram channels / chats

📰Our communities below

Rules

Stay on topic: All posts should be related to the Android OS or ecosystem.
No support questions, recommendation requests, rants, or bug reports: Posts must benefit the community rather than the individual. Please post to [email protected].
Describe images/videos, no memes: Please include a text description when sharing images or videos. Post memes to [email protected].
No self-promotion spam: Active community members can post their apps if they answer any questions in the comments. Please do not post links to your own website, YouTube, blog content, or communities.
No reposts or rehosted content: Share only the original source of an article, unless it's not available in English or requires logging in (like Twitter). Avoid reposting the same topic from other sources.
No editorializing titles: You can add the author or website's name if helpful, but keep article titles unchanged.
No piracy or unverified APKs: Do not share links or direct people to pirated content or unverified APKs, which may contain malicious code.
No unauthorized polls, bots, or giveaways: Do not create polls, use bots, or organize giveaways without first contacting mods for approval.
No offensive or low-effort content: Don't post offensive or unhelpful content. Keep it civil and friendly!
No affiliate links: Posting affiliate links is not allowed.

Quick Links

Our Communities

Lemmy App List

See thread

Chat and More

founded 1 year ago

MODERATORS

[email protected]

139

Twilio breach leaks over 30 million Authy-linked phone numbers (www.androidpolice.com)

submitted 4 months ago by [email protected] to c/[email protected]

30 comments fedilink hide all child comments

Summary

Authy is a 2FA app that recently suffered a data breach that exposed more than 33 million phone numbers.
An unsecured API endpoint allowed threat actors to collect linked numbers.
If you think your personal information might be among the 33 million leaked numbers, consider securing your accounts with 2FA and be wary of SMS phishing attacks.

you are viewing a single comment's thread
view the rest of the comments

[–] altima_neo 14 points 4 months ago (3 children)

Lol so what do you do when the 2fa app you use to protect your accounts is breached?

[–] [email protected] 8 points 4 months ago* (last edited 4 months ago) (1 children)

Don't use cloud based 2fa and you won't need to wonder about this.

Aegis is one of several opensource 2fa apps you can use instead.

[–] [email protected] 2 points 4 months ago (1 children)

Ok, but what happens if your phone gets stolen?

[–] [email protected] 3 points 4 months ago

The same as for anything else if your phone gets stolen. You restore from backups.

Aegis allows you to make a backup that you can keep yourself on your computer, your own cloud storage etc.

Every OS has some kind of built in vault/encryption feature. Put the file in there. It only needs to be updated when you add another 2fa account (so very infrequently)

[–] [email protected] 3 points 4 months ago (1 children)

Good question. You would need to start by changing all your account passwords. Next export your 2 factor auth codes. Import your auth codes in a good open source auth app. Then, one by one set new auth codes for your accounts.

This should be sufficient to protect your online accounts.

[–] [email protected] 1 points 4 months ago (1 children)

Are your bullet points AI-gen, though? The way the third bullet talked about 2FA basically kept no context of the article

[–] [email protected] 1 points 4 months ago

They are not my bullet points. It's from the android police article. It's possible the author used a LLM software to generate a summary for the article.