Ask HN: Have I found a big flaw in iCloud two factor authentication?

shekyboy · on Nov 4, 2014

The phone needs to be connected over the same wifi for the sms messages to be pushed to the computer.

It wont happen if the phone is not on the same wifi. So the assumption is if both your devices are on the same wifi network, you have ownership of both and can verify. Now if someone steals both, you have bigger problems.

Go ahead and test this after turning off wifi on your iPhone and see if this happens.

msh · on Nov 5, 2014

No, thats phone calls. SMS relay works no matter what network the units are connected to.

scrumper · on Nov 5, 2014

Aha - that's good. Will test that out but that addresses the concern. Thanks.

joshschreuder · on Nov 4, 2014

Doesn't this only happen if you were on the same Wifi network with your phone and laptop?

napoleoncomplex · on Nov 4, 2014

This is the same question that I had while using Pushbullet. If notifications appear on the laptop, then 2FA isn't really helping.

Pushbullet allows you to "mute" SMS notifications, but that's one of the key features. How do others solve this?

firangistan · on Nov 4, 2014

Like in iPhone you can choose what content you want to display in your notifications. Pushbullet should push an update so that people can choose to display only the title of the notification and not the body.