Hacker News new | ask | show | jobs
by chamomeal 16 days ago
I think the hack bypassed 2FA. If you can call “asking for account access” a hack lmao
1 comments
OJFord 16 days ago
It did not, TFA clearly says it worked for accounts with no 2FA, as GP said.
link
jeffbee 16 days ago
The hack doesn't have much to do with it. Meta account recovery flow has always allowed bypassing 2FA.
link
OJFord 14 days ago
Why did this not work for 2FA accounts then?
link