2 ms·
If this is due to the vulnerabilities in the SS7 protocol, then it hasn't been secure since 1975. Or at least 2008 when a set of vulnerabilities were published
by BLKNSLVR 4y ago
If this is due to the vulnerabilities in the SS7 protocol, then it hasn't been secure since 1975.
Or at least 2008 when a set of vulnerabilities were published.
https://en.m.wikipedia.org/wiki/Signalling_System_No._7 https://en.m.wikipedia.org/wiki/Signalling_System_No._7
- Sakos 4y agoWell, yeah. Back in 1975, we weren't generally using our phones for authentication. The environment has changed and the security issues are far more important now.
- Spooky23 4y agoMFA is supposed to be something you have in most cases, the phone is a weak proof of a line of phone service that has decreasingly diminished meaning over time. NIST describes a framework for required authenticators for different levels of trust. It’s a good starting place for understanding what represents secure practices vs theater.