2 ms·
Can you close the loop on this for me? Presumably they still would have required your password to do something nefarious, so I do not understand how they potent
by 0cf8612b2e1e 4y ago
Can you close the loop on this for me? Presumably they still would have required your password to do something nefarious, so I do not understand how they potentially profit from this.
- latchkey 4y ago¯\_(ツ)_/¯, your comment was originally flagged and has been made alive again. I'm honestly not sure what the code was for. My guess is that my FB uid is associated with my email address in some database somewhere, so let's assume they have my email. The phone number I originally texted them from is not connected with anything 2FA. I almost never have 2FA associated with SMS, since that is just dumb and when I do, it is with another number that I don't use as my main phone number. So, maybe they have some account of mine somewhere that can be validated with a 2FA sms. If they have my email, they can request the code for that account, plug in my email address + code and somehow get into my account. I don't know. It was odd... I kind of wish I had some sort of honeypot account I could have used to see what got 'hacked' after giving them the real code.