3 ms·
I presume they're referring to the ease of hijacking SS7 where SMS is so widely used for authentication / authorization.
by KMag 8y ago
I presume they're referring to the ease of hijacking SS7 where SMS is so widely used for authentication / authorization.
- pas 8y agoAh, yes, good point. Maybe forcing phones to use 3G/4G/LTE will help a bit, but using SMS and phone number as a second factor is laughable while it's completely at the mercy of a large easily soc.eng.-able company, which very-very much does not care about your SMS-sign-in security. I don't like TOTP apps, but they are significantly better.