@[email protected] to TechnologyEnglish • 7 months agoAuthy got hacked, and 33 million user phone numbers were stolenappleinsider.comexternal-linkmessage-square183fedilinkarrow-up1742arrow-down16cross-posted to: privacy
arrow-up1736arrow-down1external-linkAuthy got hacked, and 33 million user phone numbers were stolenappleinsider.com@[email protected] to TechnologyEnglish • 7 months agomessage-square183fedilinkcross-posted to: privacy
minus-square@maryjayjaylinkEnglish11•edit-27 months agoYou can, though. But not through their app. Someone reverse engineered their protocol and wrote a program that connects like a new client, which you then approve, and it dumps all your random seeds into a text file. I then put them all into Keepass. Edit: Unfortunately, the author has deprecated the project as Authy has added some attestations to their API, seemingly for this exact issue. https://github.com/alexzorin/authy?tab=readme-ov-file
minus-square@[email protected]linkfedilinkEnglish2•7 months agoRemind me to start a batch rekeying service.
minus-square@[email protected]linkfedilinkEnglish1•7 months agoIf there’s a benefit to such a tool would bad actors have already developed one?
minus-square@maryjayjaylinkEnglish1•7 months agoThey got rid of the desktop app. Also, with shouldn’t have your seeds. They’re encrypted before they are transmitted to their servers and only decrypted on the device.
minus-square@aliceblossomlinkEnglish1•7 months agoDo you know what it’s called? I’d like to do this if possible.
minus-square@AngryCommieKenderlinkEnglish2•7 months agoThey added a link, but the project has been deprecated
You can, though. But not through their app. Someone reverse engineered their protocol and wrote a program that connects like a new client, which you then approve, and it dumps all your random seeds into a text file. I then put them all into Keepass.
Edit: Unfortunately, the author has deprecated the project as Authy has added some attestations to their API, seemingly for this exact issue. https://github.com/alexzorin/authy?tab=readme-ov-file
deleted by creator
Remind me to start a batch rekeying service.
deleted by creator
If there’s a benefit to such a tool would bad actors have already developed one?
They got rid of the desktop app.
Also, with shouldn’t have your seeds. They’re encrypted before they are transmitted to their servers and only decrypted on the device.
Do you know what it’s called? I’d like to do this if possible.
They added a link, but the project has been deprecated