Following SIM Swaps, Enabling Hackers Access to Personal Information, Friend.tech Enables Adding and Removing Login Methods for User Accounts.
The decentralized social network Friend. Tech took to social media to announce an updated feature that will enable users to add and remove various login methods used to access their accounts after reports of SIM-swap attacks emerged.
On October 4, Friend.tech announced that the settings were now accessible via the app, requiring users to select their wallet balance to make adjustments.
You can now add and remove log in methods for your https://t.co/YOHabcBL3H account. To access these settings, tap your wallet balance in the top right corner of the app pic.twitter.com/d37VWVk2Eb
— friend.tech (@friendtech) October 4, 2023
Users had inquired why the platform had yet to enable a two-factor authentication passcode feature, the platform explained.
According to Friend.tech, the feature in its present state likely causes users to lock themselves out of their accounts. It stated that it had proposed UX enhancements to Privy, the company it employs to facilitate privacy features.
“Privy is working diligently to implement this and we will integrate the feature when they have finished.”
Some Friend. Tech users complained in an Oct. 2 Q&A that they were not prompted to validate their passcodes and that neither Privy nor Friend.tech could reset them if they were mistyped. In the meantime, users have responded to the update, with many claiming their accounts were already closed.
You can now add and remove log in methods for your https://t.co/YOHabcBL3H account. To access these settings, tap your wallet balance in the top right corner of the app pic.twitter.com/d37VWVk2Eb
— friend.tech (@friendtech) October 4, 2023
One user complained that, despite removing the number and replacing it with an alternative form of authentication, it did not close out sessions on other devices, allowing hackers to remain logged in.
The platform encountered exploits on October 4, during which users reported their accounts had been compromised due to SIM swap attacks, in which hackers took control of their mobile numbers.
Reports indicate that over 100 Ether was drained in just a week. By October 5, the perpetrators of the compromises had amassed at least $385,000 in Ether.
All of this results from Friend. Tech’s significant revenue increases, with surges comprising 10,663 ETH and its total locked value exceeding 30,000 ETH.