Reddit staff used SMS for two-factor authentication and got hacked

Reddit staff used SMS for two-factor authentication and got hacked

Reddit staff used SMS for two-factor authentication and got hacked

The first related to old user data - from May 2007 - that contained usernames, email addresses and encrypted passwords.

Reddit uses two-factor authentication (2FA) to authenticate its primary access points for code and infrastructure, but Reddit said SMS-based authentication, which was targeted by the attacker, is "not almost as secure" as the company thought.

If you were subscribed to the email digests and don't want data related to that account to be traced back to your email address, Reddit recommended you check the help page for how to remove that information.

Although the main group affected are those users that joined before May 2007, if you're signed up for email digests from Reddit and received one between June 3 and June 17, the hacker may also be able to connect your email address to your username.

The social platform said that all users whose data the hacker had taken would be notified via a Reddit message.

This data includes usernames and email addresses linked to those accounts. Together, these details could. In the past, cybercriminals have assumed a victim's identity to trick cellular providers into essentially giving them access to the person's phone number.

Logs containing the email digests we sent between June 3 and June 17, 2018.

"We learned that SMS-based authentication is not almost as secure as we would hope, and the main attack was via SMS intercept", he shared.

Hologic warned over inappropriate marketing of vaginal rejuvenation procedures
If the companies fail to respond, the FDA said, it will consider next steps, which might include "potential enforcement actions". Answers from the companies have been sought within the next 30 days.

Ivanka Trump speaks out against family separation
Last week, the Trump administration reunited at least 1,442 children with their parents after separating families at the border. Family separation was a direct result of the Trump administration's "zero tolerance" immigration policy.

Screenshots: Did Urban lie about knowledge of coach's abuse?
Offensive coordinator Ryan Day , who also coaches quarterbacks, will serve as acting head coach during the investigation. In an interview with McMurphy, Courtney reportedly said she and Shelley regularly talked about Zach's abuse in 2015.

"We learned that SMS-based authentication is not almost as secure as we would hope", wrote Mr Slowe.

Reddit hack safety - what do you need to do next?

The company's chief technology officer, Christopher Slowe, said: "If your account credentials were affected and there's a chance the credentials relate to the password you're now using on Reddit, we'll make you reset your Reddit account password".

The company has already reported what happened to law enforcement and is cooperating with an investigation. The company is also encouraging users to enable token-based two-factor authentication through Authy, Google's Authenticator, or a similar service.

Basically you'll want to change your Reddit password, as you should every once in a while anyway.

And it's worth taking this incident as a warning that SMS two-factor authentication isn't completely secure and that it may be worth investing in a physical authenticator key.

We don't know how many people were affected as Reddit isn't sharing that information at the moment. If you use the same password you used on Reddit in 2007 on other sites, you should reset those passwords as well (and if you use any of these passwords, you should change it for good measure).

Recommended News

  • PS4 Has Shipped 82.2 Million Units Worldwide

    PS4 Has Shipped 82.2 Million Units Worldwide

    However, Sony also angered its gaming fans by not adding a cross-platform facility for the new Nintendo Fortnite game . Every month, PlayStation reminds its playerbase why it's a good idea to be a PlayStation Plus subscriber.
    Honor Note 10 Launched, Equipped With GPU Turbo and Liquid Cooling System

    Honor Note 10 Launched, Equipped With GPU Turbo and Liquid Cooling System

    After several times leaked , rumours and teased, Huawei sub-brand smartphone unveiled officially, called Huawei Honor Note 10 . According to the company, the GPU Turbo increase the GPU performance by 60% and decreases the battery consumption by 30%.
    Trump Receives Letter from North Korea's Kim

    Trump Receives Letter from North Korea's Kim

    It has taken longer than Washington had hoped, but a U.S. state department official says the process so far has been smooth. Joe Stanton Elmore was 20 when he died on December 2, 1950, in Changjim County, Hamgyeong Province, North Korea.
  • Trump, Mueller Near Final Stages of Talks for Interview in Probe

    Trump, Mueller Near Final Stages of Talks for Interview in Probe

    In any case, Mr Sessions recused himself from the investigation in March previous year and does not have the power to stop it. Trump has steadily attacked his attorney general for recusing himself from the Russian Federation probe.
    Apple is the first United States  company worth $1 trillion (AAPL)

    Apple is the first United States company worth $1 trillion (AAPL)

    Apple's stock has climbed by 23 percent so far this year, compared to a 6 percent gain for the Standard & Poor's 500 index. Apple said it expects revenue of $60 billion to $62 billion for the fiscal fourth quarter that ends in September 30.
    Mosquitoes in London trap test positive for West Nile virus

    Mosquitoes in London trap test positive for West Nile virus

    Be sure to use insect repellent and wear long sleeves and trousers at these times or consider staying indoors during these hours. About one out of 150 infected people develop swelling of the brain or brain tissue, that in some cases, can result in death.
  • Unshaken by doubts, Thomas wins first Tour de France title

    Unshaken by doubts, Thomas wins first Tour de France title

    Second place went to Tom Dumolin (Holland, Sunweb), who lost to the victor 1 minute and 51 seconds. Geraint Thomas never flinched at whatever fans - or his rivals - threw at him or Team Sky .

    Trump to Sessions: Shut down Russian Federation probe

    Seeking to distance himself from his ex-campaign chairman, Trump said, "He worked for me for a very short time ". Sanders won't say if the White House would push Congress to pass a nationwide law calling for a voter ID system.
    Sales tax 'holiday' weekend approaches

    Sales tax 'holiday' weekend approaches

    According to the Florida Department of Revenue , Florida's tax holiday will begin this Friday and continue through Sunday. For clothing , the price of the item must be $75 or under. "So, you can definitely save more this weekend".
  • Passengers and crew survive Mexico air crash

    Passengers and crew survive Mexico air crash

    The director of the Durango state civil defense office tells Foro TV that "the most seriously injured is the pilot". In a statement posted on Twitter, Aeromexico said it is awaiting further details from authorities.
    Promoting voter ID, Trump says ID needed to buy groceries

    Promoting voter ID, Trump says ID needed to buy groceries

    President Donald Trump on Tuesday appeared not to understand how grocery shopping, or any kind of retail shopping, works . US President Donald Trump has wrongly claimed shoppers need to show photo identification to buy groceries.
    Murray proud of battling Citi Open win

    Murray proud of battling Citi Open win

    Murray had not played in a hardcourt match since March 2017 at Indian Wells, where he lost in his opening match. I enjoyed it but I don't think it's something I would do full time like after I finish playing.

We are pleased to provide this opportunity to share information, experiences and observations about what's in the news.
Some of the comments may be reprinted elsewhere in the site or in the newspaper.
Thank you for taking the time to offer your thoughts.