4 ms·
So you're telling me for the low low cost of porting someone's 2FA cell phone, I could use it to post to their page and they wouldn't know about it? No need to
by WrtCdEvrydy 7y ago
So you're telling me for the low low cost of porting someone's 2FA cell phone, I could use it to post to their page and they wouldn't know about it? No need to reset password, just use the phone number straight to account.
- RL_Quine 7y agoSMS source addresses are spoofable, so you probably don't even need to do that.
- skunkpocalypse 7y agoNo, they aren't -- unlike CallerID (for voice circuits). If they were spoofable, repliable SMS forwarding would exist. It doesn't, and plenty of people have been asking for it for a very long time. SMS sender data can only be altered if you're part of the SS7 walled garden telecom club.