4 ms·
Good 2 factor auth systems will provide the option to be called on the number on your account.
by theandrewbailey 4y ago
Good 2 factor auth systems will provide the option to be called on the number on your account.
- Spooky23 4y agoPhone isn’t a secure factor in 2022.
- BLKNSLVR 4y agoIf this is due to the vulnerabilities in the SS7 protocol, then it hasn't been secure since 1975. Or at least 2008 when a set of vulnerabilities were published. https://en.m.wikipedia.org/wiki/Signalling_System_No._7 https://en.m.wikipedia.org/wiki/Signalling_System_No._7
- Sakos 4y agoWell, yeah. Back in 1975, we weren't generally using our phones for authentication. The environment has changed and the security issues are far more important now.
- Spooky23 4y agoMFA is supposed to be something you have in most cases, the phone is a weak proof of a line of phone service that has decreasingly diminished meaning over time. NIST describes a framework for required authenticators for different levels of trust. It’s a good starting place for understanding what represents secure practices vs theater.