Looking at how 2FA secrets are synched

The synching appears to happen without any encryption. Google sees the secrets. If there is a breach…

Defcon Social @mysk