> it doesn't sound like Google Authenticator is completely to blame.
I don't think anyone would seriously claim that, but I think it's fair to call it an unfortunate additional hole in the swiss cheese.
I don't think anyone would seriously claim that, but I think it's fair to call it an unfortunate additional hole in the swiss cheese.
> Google Authenticator started syncing secrets to the cloud[0] which means that those secrets can now be accessed in new ways outside of the user's control[1], which resulted in a huge breach at a startup called Retool[2].