A security breach exposed two-factor authentication (2FA) codes/password reset links for millions of users on platforms like Facebook, Google, and TikTok.
Key Points:
- YX International, an SMS routing company, left an internal database exposed online without a password.
- The database contained one-time 2FA codes and password reset links for various tech giants.
- YX International secured the database and claims to have “sealed the vulnerability.”
- The company wouldn’t confirm how long the database was exposed or if anyone else accessed it.
- Representatives from Meta, Google, and TikTok haven’t commented yet.
Concerns:
- This leak highlights the vulnerabilities of SMS-based 2FA compared to app-based methods.
- The lack of information regarding the leak’s duration and potential access by others raises concerns.
Gemini Recommendations:
- Consider switching to app-based 2FA for increased security.
- Be cautious of suspicious communications and avoid clicking unknown links.
- Stay informed about potential security breaches affecting your online accounts.
Not really, just tired of seeing ignorant comments posted by unhinged idiots who don’t know what they’re talking about in regards to a field I’m rather knowledgeable in.
In the end, I don’t care what you think because you’re wrong and very obviously uninformed, and just lashing out at people smarter than you who aren’t willing to spoon-feed you information you could easily Google based on, again, a comment that was explicitly anecdotal.
If you had put forth even a modicum of your own effort instead of acting unhinged, you would have seen that this is a common complaint about financial institutions. But keep going off on uneducated and uninformed rants, makes you look suuuuuuuper smart.
More childish, name-calling doesn’t make you right.
Nor does a 4 -year-old link to an article about two factor authentication in some US banks prove your point about a broad generalized statement about two factor authentication everywhere today. That’s just another logical fallacy. You use to justify your irrational paranoia. It’s called the association fallacy.
And if it took you this long to provide a source that doesn’t prove your point, one can only surmise you don’t have a source that actually does prove your point. 
No, being right makes me right, and here’s me continuing to spoon-feed the ignorant and lazy. Look through that list and tell me that most institutions listed support TOTP. I won’t wait, because you can’t.
Sorry my first pick off google didn’t meet the high expectations you have for data you’re too lazy to even try to search for.
A list of banks, with two factor authentication, doesn’t prove anything other than listing banks, with two factor authentication. It certainly doesn’t prove anything you said happens to be correct. This is laughable. And stop complaining to me just because you can’t back up your argument, with a single fact, cited from a reliable source. Or any source at all, lol
And continuing to call me names just because I pointed out you can’t back up a single claim you’ve made really is quite petty and childish of you.