3 ms·
> It seems to me that SMS-2FA helps in this scenario. Am I missing something obvious? It's not necessarily scalable, but sim-swapping[0] is still an unfortunat
by jedimastert 6y ago
> It seems to me that SMS-2FA helps in this scenario. Am I missing something obvious?
It's not necessarily scalable, but sim-swapping[0] is still an unfortunately serious issue. Phone numbers are not proof of identity
[0]: https://en.wikipedia.org/wiki/SIM_swap_scam https://en.wikipedia.org/wiki/SIM_swap_scam
- RcouF1uZ4gsC 6y agoBut sim swapping is more a targeted attack. There are probably several orders of magnitude more opportunistic attacks than targeted attacks. If you can make opportunistic attacks fail and require targeted attacks, you still have a big advantage.
- ldiracdelta 6y agoSecurity is an economic effort. They have to have two things now, which at least doubles the difficulty if not even more. We dont drive tanks and wear helmets and use a 5-point harness while driving at 15 mph to get around, because we have to actually get things done with our tools and systems without going bankrupt or starving to death.