3 ms·

Leaky database of SMS text messages exposed password resets and two-factor codes

• craftyguy 8y ago
  > tens of millions of text messages, including password reset links, two-factor codes Many, or very nearly all?, of the places implementing this expire the tokens in minutes. I'm not defending 2FA over SMS, but merely pointing out this 'feature' of the 'leaky database' is probably not all that impactful.
  • breakingcups 8y ago
    They go into that. The database was queryable in (near) realtime.
    • deleted 8y ago
      [deleted]