Hacker News new | ask | show | jobs
by coredog64 1380 days ago
2FA apps record physical location. Now you need to spoof time & location on your phone to log in.
1 comments
0x457 1377 days ago
Except I use YubiKey for my 2FA, so where my phone is irrelevant. Moreover, I've never ever granted 2FA app location permissions. Don't even remember any of them asking it. It's generally GeoIP and time is well...the same everywhere?
link