Hacker News Reader

Sorry, my question was can they do that for my account information as well? Could they setup kiosks for me to sign into Facebook? The author in the post advocated uploading my data into the cloud and factory resetting my phone, though I don't believe this will work if they can just ask me for my Facebook.

View on HN

I think they could, they just don't do it yet.

The author is arguing that they wouldn't know the usernames or even the services themselves of your accounts and as such could not ask for them. I call bullshit on that (see my top level comment on this).

If you have 2FA then some of those accounts may not be accessible without your phone. For instance, if I didn't bring my phone with me (which I use to authenticate) I wouldn't even be able to log in to my email.

Or, taken a little further, I don't even know my email password anyways. Its locked in a password manager which requires 2FA. I would myself be locked out of almost all of my accounts if I didn't bring my phone.

And that makes resetting it a non-starter too doesn't it?

Sure does, though my post was leaning towards leaving it at home so not resetting it (and thus not being able to login to at a kiosk).

But this also raises the question of them believing me that I can't login because I don't know my password.

Reply on news.ycombinator.com