phys-npps-members-l AT lists.bnl.gov

Subject: ALL NPPS Members

List archive

From: "Ye, Shuwei" <yesw AT bnl.gov>
To: "Phys-npps-members-l AT lists.bnl.gov" <Phys-npps-members-l AT lists.bnl.gov>
Subject: [[Phys-npps-members-l] ] security concerns in Google Authenticator and solution
Date: Fri, 22 Nov 2024 16:15:09 +0000

Dear all,

As mentioned in the guide of CERN 2FA setup, "Google Authenticator" as it comes with some security drawbacks.

Then sync communication between endpoint and cloud is unencrypted and can be snooped on by adversaries.

The solution is to turn off the new syncing feature:

1. Open the Google Authenticator app on your device.

2. Tap on your profile photo in the top-right corner.

3. Select "Use without an account" from the menu options.

4. Tap "Continue" to confirm.

Cheers,

--Shuwei

[[Phys-npps-members-l] ] security concerns in Google Authenticator and solution, Ye, Shuwei, 11/22/2024