A leaky database spilled 2FA codes for the world's tech giants | TechCrunch
techcrunch.com
An SMS routing company's exposed database was left online without a password, spilling 2FA codes and password reset links to the open web.

A security breach exposed two-factor authentication (2FA) codes/password reset links for millions of users on platforms like Facebook, Google, and TikTok.

Key Points:

  • YX International, an SMS routing company, left an internal database exposed online without a password.
  • The database contained one-time 2FA codes and password reset links for various tech giants.
  • YX International secured the database and claims to have “sealed the vulnerability.”
  • The company wouldn’t confirm how long the database was exposed or if anyone else accessed it.
  • Representatives from Meta, Google, and TikTok haven’t commented yet.

Concerns:

  • This leak highlights the vulnerabilities of SMS-based 2FA compared to app-based methods.
  • The lack of information regarding the leak’s duration and potential access by others raises concerns.

Gemini Recommendations:

  • Consider switching to app-based 2FA for increased security.
  • Be cautious of suspicious communications and avoid clicking unknown links.
  • Stay informed about potential security breaches affecting your online accounts.
  • Dr. Wesker@lemmy.sdf.orgEnglish
    241·
    9 months ago

    Bro, I literally don’t even understand your malfunction, lol. I don’t at this point even know what I said you think is so wild. Lots of really important businesses and services still only allow for for SMS or email OTP delivery. If you find that for the most part that sentiment doesn’t apply to you because your day to day account spread differs, more power to you.

    • frezikEnglish
      31·
      9 months ago

      There seems to be a trend with certain people of always asking to “cite your sources” on every goddamn thing. Then when you refuse, they’ll trot out “extraordinary claims require extraordinary evidence”, and your only claim is that you bought a sandwich yesterday.

      Worst way to “win” an Internet fight.

      • Dr. Wesker@lemmy.sdf.orgEnglish
        21·
        9 months ago

        You’re either playing a fool to try to rustle my jimmies, or you genuinely have exceeded your FRESHEST IF USED BY date. It bores me, so I’m just going to block you.