> shifting the attack surface to depend on social engineering Other than social engineering, there's also SS7 abuse: https://arstechnica.com/information-techn

> shifting the attack surface to depend on social engineering Other than social engineering, there's also SS7 abuse: https://arstechnica.com/information-technology/2017/05/thieves-drain-2fa-protected-bank-accounts-by-abusing-ss7-routing-protocol/ https://arstechnica.com/information-technology/2017/05/thiev...