3 ms·
Last time I checked, Vanguard's implementation is worthless because you can still request an SMS code as an alternate path.
by whitepoplar 4y ago
Last time I checked, Vanguard's implementation is worthless because you can still request an SMS code as an alternate path.
- atonse 4y agoDid I miss something? Is SMS totally broken? I know it’s not encrypted but has it suddenly become easy to intercept?
- qmarchi 4y agoSMS is based on SS7 signaling, which is broken pretty bad: https://www.techtarget.com/whatis/definition/SS7-attack https://www.techtarget.com/whatis/definition/SS7-attack There's also SIM-swap attacks that rely on social engineering your carrier.
- aaaaaaaaata 4y agoYes, to everything except "suddenly".