3 ms·
For me the main takeaway from the article is that the robbers have become sophisticated enough to perform phishing attacks to get iCloud credentials. Also, the
by jor-el 7y ago
For me the main takeaway from the article is that the robbers have become sophisticated enough to perform phishing attacks to get iCloud credentials.
Also, the author says using Authy is a good alternative as it provides encrypted backup, but account authentication is via OTP to the registered phone number, so it brings back to the same problem. Is there other alternatives to this?
- lotsofpulp 7y agoI don’t see how it’s sophisticated. Seems like an obvious method to get access to someone’s login info, and simply enabling 2FA (non SMS preferably), and disabling mobile service would have been the common sense protocol to prevent all of this. SMS 2FA is always weaker than TOTP, as are touchID and faceID. But you pay for convenience. And sometimes users aren’t given the option for TOTP, which is ridiculous in this day and age.