3 ms·
Susceptible, but more limited. I think an article should be written like this: "There isn't a security measure that exists short of locking a computer in room
by mbesto 8y ago
Susceptible, but more limited.
I think an article should be written like this:
"There isn't a security measure that exists short of locking a computer in room with a keyless door and no external connection that is completely flawless to hacking, there are just varying degrees of computer security and 2FA happens to be safer than others".
- UncleMeat 8y agoHow more limited? In both cases you type some numbers into a form field. The phishing attack is exactly the same.
- mbesto 8y agoPhone number vulnerabilities include the unique vectors of: - Someone porting away your phone number from your wireless provider - The ease of confusion of a txt message asking you to send a generated OTP (e.g. you're more likely to forward a OTP generated from a SMS to another SMS, than you would from a TOTP generator) - Wireless provider can theoretically read the message in transit (or backdoor code, whether from a gov't agency or a malicious actor acting on behalf of the wireless provider) Those are just 3 I can think of off the top of my head...I'm sure there are more.
- akerl_ 8y agoThe first and last of those aren’t phishing, and the middle doesn’t seem likely. I’ve never legitimately been asked to text the code I just got via text