Coinbase screw up

[bigrobbie]

https://www.coindesk.com/coinbase-reveals-password-glitch-affecting-3500-customers

 

[MindlessWork]

Ouch. Yet another big screwup by a financial company. Better change those passwords and security questions fast all you Coinbase users.

 

[Arnold]

They use a double opt in with a cell phone and email, so not sure how this could affect anyone.

 

[randy4me]

3500 customers out of over 30 million worldwide.

Sent from my LM-X410(FG) using Tapatalk

 

[Arnold]

3500 customers out of over 30 million worldwide.

Sent from my LM-X410(FG) using Tapatalk

If I need a code to be sent to my cell phone and an email to my email account to login how does a hacker get around that?

 

[randy4me]

If I need a code to be sent to my cell phone and an email to my email account to login how does a hacker get around that?

Not worth their time even if they could. 2FA is hard to get around.

Sent from my LM-X410(FG) using Tapatalk

 

[chocolatemalt]

If I need a code to be sent to my cell phone and an email to my email account to login how does a hacker get around that?

It's far more secure than not using 2FA. Both your phone and email would need to be hacked.

But those devices are hackable. Happens all the time. It would just require a persistent, targeted attack in this case rather than a random mass-harvesting worm that snags the occasional email, for instance.

One problem that cropped up recently was phone # stealing. I believe the hackers used social engineering at mobile stores to make it happen. If they succeed, they get all your texts until you fix the problem. There goes a big part of your security.

The situation is getting worse over time. The day the hackers start using AI to do targeted attacks is gonna be a bad one. It's coming.

 

[MindlessWork]

It's far more secure than not using 2FA. Both your phone and email would need to be hacked.

But those devices are hackable. Happens all the time. It would just require a persistent, targeted attack in this case rather than a random mass-harvesting worm that snags the occasional email, for instance.

One problem that cropped up recently was phone # stealing. I believe the hackers used social engineering at mobile stores to make it happen. If they succeed, they get all your texts until you fix the problem. There goes a big part of your security.

The situation is getting worse over time. The day the hackers start using AI to do targeted attacks is gonna be a bad one. It's coming.

Yes they are working on it...better yet always change your email's password and be sure you keep tabs on your phone too.

 

[Jswole220]

If I need a code to be sent to my cell phone and an email to my email account to login how does a hacker get around that?

simply. It happens all the time. Theirs a way that can have that code sent to any number or e mail. Hackers are smart this actually happened not too long ago with my bank app just not nearly as widespread