August 01, 2018
Reddit on Wednesday reported a data breach. The good news? Nothing too major was likely stolen. The bad news? It involved a two-factor authentication scam.
During the mid-June intrusion, the Hacker accessed an old backup of Reddit that contained user data such as hashed passwords from 2007. The culprit also viewed logs from Reddit's "email digests," which can associate a username with an email address, if you provided it.
In other words, the breach appears to have only exposed email address information for existing users and scrambled password data for long-time Reddit fans from over a decade ago.
Reddit hacked, despite SMS two-factor authentication
"The attacker did not gain write access to Reddit systems; they gained read-only access to some systems that contained backup data, source code and other logs," Reddit engineer " KeyserSosa " said in a post detailing the security incident.
Nevertheless, the breach is raising alarm bells in the IT security community because the attacker did so by breaking into employee accounts that were supposedly protected by two-factor authentication.
These accounts were configured to not only need a password upon login, but also a special one-time passcode that would've been sent over the employee's smartphone via SMS messaging.
"We learned that SMS-based authentication is not nearly as secure as we would hope, and the main attack was via SMS intercept," Reddit's KeyserSosa said, without elaborating.
How does a hacker go about stealing SMS messages? It's not as hard as you might think. In the past, cybercriminals have assumed a victim's identity to trick cellular providers into essentially giving them access to the person's phone number. Hackers with more technical expertise and the right hardware can also tamper with cellular technologies to collect nearby SMS messages or temporarily spoof someone's phone number.
Whatever the case may be, Reddit is using the security incident to encourage the public to switch over to non-SMS-based two-factor authentication. This involves your smartphone generating the special one-time passcode over an app. Another solution is to use a hardware-based security key, which is what Google has done to stop phishing on company employee accounts.
If you don't have two-factor authentication, it's a good idea to use it on your most important accounts, like Facebook or your bank, which can usually be activated in the settings page. Even the SMS-based authentication is better than simply protecting your account with a password.
For Reddit users who may have had their login credentials stolen in the breach, the website will reset passwords and message affected users with tips on how they can protect themselves.
"Whether or not Reddit prompts you to change your password, think about whether you still use the password you used on Reddit 11 years ago on any other sites today," the site said.
Latest News
Top news around the world
Coronavirus Disease

Coronavirus disease (COVID-19) is an infectious disease caused by a newly discovered coronavirus.

Most people infected with the COVID-19 virus will experience mild to moderate respiratory illness and recover without requiring special treatment. Older people, and those with underlying medical problems like cardiovascular disease, diabetes, chronic respiratory disease, and cancer are more likely to develop serious illness.

Around the World

Celebrity News

> Latest News in Media

Watch It
Chris Meloni talks 'Maxxx' and His Return to 'Law and Order'
July 30, 2020
ZFTDB-dwyUA
'The Fugitive' Star Boyd Holbrook Shares Why He Left 'Narcos' After 2 Seasons
July 30, 2020
2kTuD8LTGCE
'Umbrella Academy' Season 2 Finds The Hargreeves Navigating the 1960s
July 24, 2020
JdPgaIxmUKg
Tekashi 6ix9ine Shoots Music Video After Release from House Arrest
August 02, 2020
VyVVV5Tg1EA
Montana Couple Married at Age 91, Signed a Prenup | TMZ
August 02, 2020
1sImDqNXfko
Donald Trump Suggests Presidential Election Should Be Delayed | TMZ
July 31, 2020
dueLNw16vkY
Al Roker Talks New Book, George Floyd & Being on "TODAY" | Daily Pop | E! News
August 03, 2020
TC2Kb1J10GQ
Is Clare Crawley Quitting "The Bachelorette"? | Daily Pop | E! News
August 03, 2020
LoIhGfCkTHg
How Martha Stewart's Living a Hot Girl Summer in Quarantine | E! News
August 03, 2020
P9JtvNrTKhQ
Davina Potratz wishes her softer side was shown on ‘Selling Sunset’ | Page Six Celebrity News
July 31, 2020
5E6w1CgPiEI
Will Ellen Degeneres be replaced? | Page Six Celebrity News
July 30, 2020
qL3cje-HhPM
Selling Sunset's Christine Quinn reveals why she feuds with Heather Rae Young, Davina Potratz
July 30, 2020
s7kL7qBqzg4
TV Schedule
Late Night Show
Watch the latest shows of U.S. top comedians

Sports

Latest sport results, news, videos, interviews and comments
Latest Events
02
Aug
ITALY: Serie A
Genoa - Verona
02
Aug
ITALY: Serie A
Bologna - Torino
02
Aug
ITALY: Serie A
Lecce - Parma
02
Aug
ITALY: Serie A
Sassuolo - Udinese
02
Aug
ITALY: Serie A
Spal - Fiorentina
01
Aug
ITALY: Serie A
Juventus - Roma
01
Aug
ITALY: Serie A
AC Milan - Cagliari
01
Aug
ITALY: Serie A
Napoli - Lazio
01
Aug
ITALY: Serie A
Atalanta - Inter Milan
29
Jul
ITALY: Serie A
Torino - Roma
29
Jul
ITALY: Serie A
Cagliari - Juventus
29
Jul
ITALY: Serie A
Sampdoria - AC Milan
28
Jul
ITALY: Serie A
Inter Milan - Napoli
26
Jul
ENGLAND: Premier League
Manchester City - Norwich City
26
Jul
ENGLAND: Premier League
Arsenal - Watford
26
Jul
ENGLAND: Premier League
Leicester City - Manchester United
26
Jul
ITALY: Serie A
Juventus - Sampdoria
26
Jul
ENGLAND: Premier League
Chelsea - Wolves
26
Jul
ENGLAND: Premier League
Newcastle United - Liverpool
26
Jul
ENGLAND: Premier League
Crystal Palace - Tottenham Hotspur
26
Jul
ITALY: Serie A
Roma - Fiorentina
25
Jul
ITALY: Serie A
Napoli - Sassuolo
25
Jul
ITALY: Serie A
Genoa - Inter Milan
24
Jul
ITALY: Serie A
AC Milan - Atalanta
23
Jul
ITALY: Serie A
Udinese - Juventus
22
Jul
ENGLAND: Premier League
Liverpool - Chelsea
22
Jul
ENGLAND: Premier League
Manchester United - West Ham United
22
Jul
ITALY: Serie A
Spal - Roma
22
Jul
ITALY: Serie A
Inter Milan - Fiorentina
22
Jul
ITALY: Serie A
Parma - Napoli
21
Jul
ITALY: Serie A
Sassuolo - AC Milan
Find us on Instagram
at @feedimo to stay up to date with the latest.
Featured Video You Might Like
-g9Qziqbif8 0vmRhiLHE2U JFCZUoa6MYE UfN5PCF5EUo 2PV55f3-UAg W3y9zuI_F64 -7qCxIccihU pQ9gcOoH9R8 g5MRDEXRk4k tudKp5Vhs3k iwWHibhssSo kQr0XHPbICM
Copyright © 2020 Feedimo. All Rights Reserved.