3 ms·
This is why SMS-based "2FA" is not real 2FA. Anything vulnerable to social engineering customer service reps at some giant telecom, or faking documents to port
by walrus01 5y ago
This is why SMS-based "2FA" is not real 2FA. Anything vulnerable to social engineering customer service reps at some giant telecom, or faking documents to port out a number (SS7/PSTN are woefully insecure and should not be trusted by anyone), is a huge gaping hole.