Bitcoin Forum
August 18, 2022, 11:08:46 AM *
News: Latest Bitcoin Core release: 23.0 [Torrent]
   Home   Help Search Login Register More  
Pages: [1]
Author Topic: Facebook app now compromises SMS-based 2 factor authentication  (Read 589 times)
Offline Offline

Activity: 1008
Merit: 1000

Let the chips fall where they may.

View Profile WWW
January 11, 2014, 04:34:15 PM

The new facebook App asks for a lot of new permissions. Among them is "Read your text messages (SMS or MMS)".

This breaks the SMS-based 2 factor authentication used by many Bitcoin services. This means that if Facebook somehow gets your login passphrase (you do use a different one for each website, don't you?), they can now steal all of your Bitcoin stored in those services.

James' OpenPGP public key fingerprint: EB14 9E5B F80C 1F2D 3EBE  0A2F B3DE 81FF 7B9D 5160
Pages: [1]
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!