SandbagTiara2816@lemmy.dbzer0.com to Technology@lemmy.worldEnglish · 1 year agoAuthy got hacked, and 33 million user phone numbers were stolenappleinsider.comexternal-linkmessage-square81fedilinkarrow-up1525arrow-down15
arrow-up1520arrow-down1external-linkAuthy got hacked, and 33 million user phone numbers were stolenappleinsider.comSandbagTiara2816@lemmy.dbzer0.com to Technology@lemmy.worldEnglish · 1 year agomessage-square81fedilink
minus-squaremaryjayjay@lemmy.worldlinkfedilinkEnglisharrow-up9·edit-21 year agoYou can, though. But not through their app. Someone reverse engineered their protocol and wrote a program that connects like a new client, which you then approve, and it dumps all your random seeds into a text file. I then put them all into Keepass. Edit: Unfortunately, the author has deprecated the project as Authy has added some attestations to their API, seemingly for this exact issue. https://github.com/alexzorin/authy?tab=readme-ov-file
minus-squaretodd_bonzalez@lemm.eelinkfedilinkEnglisharrow-up10arrow-down1·edit-27 months agodeleted by creator
minus-square___@lemm.eelinkfedilinkEnglisharrow-up2·1 year agoRemind me to start a batch rekeying service.
minus-squaretodd_bonzalez@lemm.eelinkfedilinkEnglisharrow-up2arrow-down1·edit-27 months agodeleted by creator
minus-squarecan@sh.itjust.workslinkfedilinkEnglisharrow-up1·1 year agoIf there’s a benefit to such a tool would bad actors have already developed one?
minus-squaremaryjayjay@lemmy.worldlinkfedilinkEnglisharrow-up1·1 year agoThey got rid of the desktop app. Also, with shouldn’t have your seeds. They’re encrypted before they are transmitted to their servers and only decrypted on the device.
minus-squarealiceblossom@lemmy.worldlinkfedilinkEnglisharrow-up1·1 year agoDo you know what it’s called? I’d like to do this if possible.
minus-squareAngryCommieKender@lemmy.worldlinkfedilinkEnglisharrow-up2·1 year agoThey added a link, but the project has been deprecated
You can, though. But not through their app. Someone reverse engineered their protocol and wrote a program that connects like a new client, which you then approve, and it dumps all your random seeds into a text file. I then put them all into Keepass.
Edit: Unfortunately, the author has deprecated the project as Authy has added some attestations to their API, seemingly for this exact issue. https://github.com/alexzorin/authy?tab=readme-ov-file
deleted by creator
Remind me to start a batch rekeying service.
deleted by creator
If there’s a benefit to such a tool would bad actors have already developed one?
They got rid of the desktop app.
Also, with shouldn’t have your seeds. They’re encrypted before they are transmitted to their servers and only decrypted on the device.
Do you know what it’s called? I’d like to do this if possible.
They added a link, but the project has been deprecated