4 ms·

Smoke and mirrors, this post. Maybe replace Telegram with SS7 and it would make more sense.

• lxgr 4y ago
  If a service uses a known insecure authentication method, how is that the fault of the authentication and not the service?
  • jeroenhd 4y ago
    Most serfkces use insecure authentication methods, especially in the messenger space. They're almost exclusively built around your phone number being the guiding proof of your identity.
    • lxgr 4y ago
      True, but in most of them, you can‘t recover past conversations using SMS-OTP alone. Authentication should be proportional to what it‘s protecting.