Calgarypuck Forums - The Unofficial Calgary Flames Fan Community
Old 04-26-2023, 11:37 AM   #1
photon
The new goggles also do nothing.
 
photon's Avatar
 
Join Date: Oct 2001
Location: Calgary
Exp:
Default Google Authenticator new sync feature maybe not end to end encrypted

If anyone is using Google Authenticator you might not want to enable the new sync feature as it might not encrypt the info.

I've been meaning to move to something different (Authy?) anyway since there's no way to lock the app itself.

https://gizmodo.com/google-authentic...ted-1850377102

Quote:
On Monday, Google announced a long-awaited feature, which lets you sync Authenticator to a Google account and use it across multiple devices. That’s great news because in the past, you could end up locked out of your account if you lost the phone with the authentication app installed.

But when app developers and security researchers at the software company Mysk took a look under the hood, they found the underlying data isn’t end-to-end encrypted.

“We tested the feature as soon as Google released it. We realized that the app didn’t prompt or offer an option to use a passphrase to protect the secrets,” the company wrote on Twitter.

“We analyzed the network traffic when the app syncs the secrets, and it turns out the traffic is not end-to-end encrypted,” the company added added. “As shown in the screenshots, this means that Google can see the secrets, likely even while they’re stored on their servers.”
__________________
Uncertainty is an uncomfortable position.
But certainty is an absurd one.
photon is offline   Reply With Quote
The Following 6 Users Say Thank You to photon For This Useful Post:
Old 04-26-2023, 04:06 PM   #2
Bill Bumface
My face is a bum!
 
Bill Bumface's Avatar
 
Join Date: Feb 2003
Exp:
Default

Just going to drop some promotion for 1Password. Have all your stuff auto-fill these things and stop thinking about them. Google makes you think you need to use their authenticator crap, but you can click your way through the buried menus and use whatever OTP tool you want.
Bill Bumface is offline   Reply With Quote
Old 04-28-2023, 02:03 PM   #3
DownInFlames
Craig McTavish' Merkin
 
DownInFlames's Avatar
 
Join Date: Oct 2008
Exp:
Default

And the new icon looks like a rainbow butthole.
DownInFlames is offline   Reply With Quote
Reply

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -6. The time now is 08:48 AM.

Calgary Flames
2023-24




Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
Copyright Calgarypuck 2021