2 ms·
"This spells the end of privacy on the Internet. Your phone 100% identifies you." My "2FA Mule" has no identifying information of any kind on it and doesn't fo
by rsync 5y ago
"This spells the end of privacy on the Internet. Your phone 100% identifies you."
My "2FA Mule" has no identifying information of any kind on it and doesn't follow my location(s).
It's a stock android phone with no google account and no apps installed except for "SMS Forwarder"[1].
It is configured to forward all SMS to an email address via encrypted SMTP. This means that I can receive these 2FA codes anywhere I have Internet access - such as an airplane or newly arrived in a foreign country where my SIM card does not work.
The "2FA Mule" itself is plugged in at my office in a corner.
I'm not employing this for anything sensitive but it's interesting to consider that I can use SMS based 2FA while divorcing it from my day to day SIM identity ...
[1] https://play.google.com/store/apps/details?id=com.frzinapps.smsforward&hl=en_US&gl=US https://play.google.com/store/apps/details?id=com.frzinapps....
- fragmede 5y agoWhat happens if that phone is destroyed through some sort of accident, possibly involving your office? No matter how unlikely, if that's not a contingency you've planned for, the plan needs some work.
- mattowen_uk 5y agoAt some point you've got to sign off on 'acceptable risk'.
- rsync 5y ago"What happens if that phone is destroyed through some sort of accident ..." I don't think that's an issue at all ... I don't care about the phone - all I care about is the SIM card. If the SIM card is destroyed, your provider can issue a new one. I guess if the 2FA mule was destroyed while I was traveling that would be a real pain but ...
- kradeelav 5y agoThat's a great idea, and worth remembering for me in the future, but it's also worth noting not everyone can afford a 2FA mule phone. (yes even as relatively "cheap" phones are these days. there was a time that $20 was a no-go for me.)