Twilio has confirmed that unauthorized actors had identified phone numbers associated with users of its Authy two-factor authentication app.
The disclosure comes after a hacker claimed last week to have obtained 33 million phone numbers from Twilio.
https://www.twilio.com/en-us/changelog/Security_Alert_Authy_App_Android_iOS
@ecksmc dang it.
@SimplyZippy if you use Android switch to Aegis
No phone number required
Aegis doesn’t support automatic cloud backups out of the box unless you use Nextcloud. However, it offers automatic local backups and allows you to export your data manually.
most important features are security, backups and customization.
@ecksmc thanks, I'll look at that!
@ecksmc that's a big ol yikes 😬
#TipsAndTricks ^^^^
Use Aegis instead 😝
Source code:
https://github.com/beemdevelopment/Aegis
Android:
/nosanitize
https://play.google.com/store/apps/details?id=com.beemdevelopment.aegis
Aegis has not, to my knowledge, suffered from any security incidents. It’s also open source so anyone can vet its code
Authy was hacked back in 2022 also, with bad actors adding new devices to the accounts of 93 Authy users - fool me once blah, blah, blah 😝
Authy shouldn't be trusted anymore