3 ms·
Phone number vulnerabilities include the unique vectors of: - Someone porting away your phone number from your wireless provider - The ease of confusion of a
by mbesto 8y ago
Phone number vulnerabilities include the unique vectors of:
- Someone porting away your phone number from your wireless provider
- The ease of confusion of a txt message asking you to send a generated OTP (e.g. you're more likely to forward a OTP generated from a SMS to another SMS, than you would from a TOTP generator)
- Wireless provider can theoretically read the message in transit (or backdoor code, whether from a gov't agency or a malicious actor acting on behalf of the wireless provider)
Those are just 3 I can think of off the top of my head...I'm sure there are more.
- akerl_ 8y agoThe first and last of those aren’t phishing, and the middle doesn’t seem likely. I’ve never legitimately been asked to text the code I just got via text