The U.S. SEC's twitter account “did not have two-factor authentication enabled”. In 2024. For reals.

#SEC #security #fail #2fa #LackOf

Follow

@gpshead Interesting, I was not surprised by this because last time I checked, Twitter was only supporting SMS 2FA(and IIRC Twitter [once used those numbers for advertising](grahamcluley.com/twitter-2fa-p)), which I assume is incompatible or massively inconvenient for an org account, but it seems like they have improved the situation a lot since then.

@pganssle
The sadder part is that any US govt agency has Twitter accounts at all. What a waste.

Sign in to participate in the conversation
CleverLibre Social

CleverLibre Social is an inclusive social instance for open discussion, learning, and community.
All cultures welcome.
Hate speech and harassment strictly forbidden.