4 ms·
Why (or how) is it trivial to bypass text messaging 2FA ?
by lma21 5y ago
Why (or how) is it trivial to bypass text messaging 2FA ?
- primax 5y agoSim swap attacks are the main way, becoming more common every day
- deepstack 5y agosms can also be intercepted by folks who knows what they doing in the approximate location as the cell phone user. Cell phone/sms is NOT secure.
- orwin 5y agoIt is susceptible to sim swapping (probably not hte case here). I think there is also a method for mirroring the 2FA code, as well as intercepting the message (i don't know how easy it is though).
- mcraiha 5y agoSIM swapping https://en.wikipedia.org/wiki/SIM_swap_scam https://en.wikipedia.org/wiki/SIM_swap_scam
- tetromino_ 5y agoThe problem is that mobile providers, unlike tech companies, prioritize customer service over security. Thus they have human customer service agents instead of heartless robots, and the human agents will, with the tiniest bit of social engineering, allow your phone number to be taken over or ported by a scammer.