3 ms·

So it seems that there was a bug in the two factor authentication affecting "some accounts" during the recovery procedure (see the update to the article). Sligh

• boundlessdreamz 14y ago
  But even after resetting the password, two factor authentication is needed to log in right? How was that bypassed?
  • monopede 14y ago
    The blog author didn't actually have two factor authentication enabled. The headline is wrong.
    • Strom 14y ago
      You are incorrect, quote from the article: all CloudFlare.com accounts use two-factor authentication. We are still working with Google to understand how the hacker was able to reset the password without providing a valid two-factor authentication token.
    • boundlessdreamz 14y ago
      He didn't have it for his personal account. But he did have it for cloudfare.com accounts.