3 ms·
Leave your phone at home, plug an Arduino into the phone's OTG USB that behaves like a mouse and keyboard, and use that to send the necessary swipes. We really
by dheera 5y ago
Leave your phone at home, plug an Arduino into the phone's OTG USB that behaves like a mouse and keyboard, and use that to send the necessary swipes.
We really should ban SMS-based 2FA.
- sleepyhead 5y agoIt is not regular SMS, it is PKI based with a custom SIM application that uses SMS (Flash). Intercepting these SMS would not help you (unless you have hacked their app). Also note that SIM app runs independently from the mobile OS.
- dheera 5y agoOkay, then intercept them with an analog loophole. Keep one cheap phone mounted with a camera and robot arm poker, build the API on that, then get an additional SIM for your normal actually mobile use. Or eschew the camera by using LineageOS (which can ignore anti-screenshot measures) and screenshot over ADB. If you're in the US, it costs only $20/mo for an basic level Google Fi SIM (T-mo + Sprint network) or $25/mo for a Visible SIM (Verizon network), and they will be seen as an actually mobile number by the network. I imagine there are similarly cheap deals in most other countries as well.