How many times do we have to read that X is vulnerable to SS7 attacks? This has been going for the last couple of years. SS7 in itself is huge disaster, I can

How many times do we have to read that X is vulnerable to SS7 attacks? This has been going for the last couple of years. SS7 in itself is huge disaster, I can recommend the following presentations: https://media.ccc.de/v/31c3_-_6249_-_en_-_saal_1_-_201412271715_-_ss7_locate_track_manipulate_-_tobias_engel https://media.ccc.de/v/31c3_-_6249_-_en_-_saal_1_-_201412271... and https://media.ccc.de/v/31c3_-_6531_-_en_-_saal_6_-_201412272300_-_ss7map_mapping_vulnerability_of_the_international_mobile_roaming_infrastructure_-_laurent_ghigonis_-_alexandre_de_oliveira https://media.ccc.de/v/31c3_-_6531_-_en_-_saal_6_-_201412272... tldr: everything that uses sms is vulnerable. edit: as others already mentioned, use offline 2fa like google authenticator.