https://techhub.social/@Techmeme/112723724698560093
Consider this a sign. Stop fucking using Twilio Authy, or any proprietary 2FA app, period.
It's not even about the data breaches (Authy was breached previously in August 2022) (https://www.digitaltrends.com/mobile/authy-hackers-breach-two-factor-authentication-2fa-codes/), but also that Authy sends telemetry that could be potentially identifiable.
Authy sends data about which websites you're logging into, they create a user ID when you create an account (which requires e-mail AND phone number verification), and then they tie any accounts you add to the app to this ID. This is NOT anonymous! (https://www.youtube.com/watch?v=JHIAIzOPz3I)
Other apps such as Google and Microsoft Authenticator aren't any better either! Microsoft Authenticator pulls the same shit as Authy, but they send IDs and telemetry even if you toggle analytics off. For example, if you scan a QR code for a Google account, Microsoft will know that the user with the specific device ID has a Google account with 2FA. (https://www.youtube.com/watch?v=r5456XXG6v0)
#Authy #StopUsingAuthy #2FA
Joe Ortiz
All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.