3 ms·
The issue is that most communication is centralized between two companies, Verizon and ATT, and those companies have employees that are very, very fallible. We
by Jerrrry 5y ago
The issue is that most communication is centralized between two companies, Verizon and ATT, and those companies have employees that are very, very fallible.
We need to decentralize our communication infrastructure.
- mym1990 5y agoNo real reason to point the finger at people at Verizon and ATT are more fallible than others. Almost anyone can fall for social engineering if done right/often enough. I know you probably think you're too smart to be fooled like that, but that's exactly how you'll fall to a scam.
- Jerrrry 5y agoThe people Verizon/ATT are more fallible, because of the implicit risk/threat model that is imposed on us by duopolistic infrastructure. They have vastly more power without the required training. This asymmetry makes them larger targets, and therefore, more fallible. ATT/Verizon employees are the weakest link in almost all threat models, including our national one. I don't think I am personally infallible; and I am/used to be the reason you have to take cyber, social engineer, and spear attack trainings every year. It is because I know the true weakest links (humans with unrelegated access) that compel me to remind others: do not use SMS for 2FA. There are other ways of getting the nonce/temporal secret to the end-user without pitting the security to a overworked 27 year old druggy CSR in upstate new york.
- mym1990 5y agoEh to be honest your whole argument fell apart as I read the last few words. Hope you change your outlook on the world, for your own good.
- mindslight 5y agoThat's a problem for sure, but it's not the problem here. The problem here is cryptocurrency trustees implementing snake oil "2FA" using the PSTN, which was never intended to provide the needed security properties.