PSA: I was hacked (3k USD + private data). Apple ID 2FA was bypassed.
Avoid SMS 2FA. Avoid iCloud. Avoid hot keys. Rotate your passwords.
I wrote a detailed post on what, when & how this happened. Investigation is still in progress
Stay safe!
Conversation
HN discussion:
news.ycombinator.com/item?id=248852
1
1
Do you have Continuity enabled? Seems like a sim clone, ss7 or other form of intercept by an app on your phone or on your computer (if your computer has access to your sms).
1
1
Replying to
Actually, could even be a telco employee is able to read your plain text sms logs.
Replying to
do you have anyone who can help de-anonymize 0x8c46335777867367e279350eedacda5463de9029 ?

