Post

@safety.bsky.app

We're aware of a phishing attack that has compromised more than 4,500 accounts. The attack spread through posts promoting a fake offer of a government payment. We have temporarily suspended the compromised accounts and are working with their owners to secure them and restore access.

Mallow 🦊

@hexandcube.com

Bluesky still doesn't support proper MFA. No TOTP, no Passkeys and no hardware security keys. WebAuthn has been an Industry standard for a while now. Email OTP is not a strong second factor, since having access to someone's inbox is enough to access their Bluesky account.

19/10/26, 12:59 pm2 reposts6 likes

multifandom hellscapes

@multifandom.andreijiroh.dev

💯 agree here since it's an issue on the canonical PDS implementation (community-built ones like @tranquil.farm do have proper MFA + passkey support, but most people don't migrate off Bluesky PDS or self-host them)

Mallow 🦊

@hexandcube.com

I don't know, maybe Bluesky developers should focus on developing ATproto and the main platform instead of wasting time on questionable side projects that in no way benefit the network and its users. Basic security should be a priority.