3 ms·
Maybe you’re one of the first victims of Ivanti hack? The exploit can obtain names/phone numbers https://news.ycombinator.com/item?id=36913774 https://news.yco
by tamimio 3y ago
Maybe you’re one of the first victims of Ivanti hack? The exploit can obtain names/phone numbers
https://news.ycombinator.com/item?id=36913774 https://news.ycombinator.com/item?id=36913774
>Are there any steps/recommendations I should take to bolster my security now
Of course, never use SMS as a 2FA, it’s broken by design, GSM protocol isn’t secure. And if the service insists to use a phone number, time to stop that service if you value your privacy and data.
As how it happened if it wasn’t related to the above hack, maybe your phone is compromised, but I highly doubt someone is zero-daying your iPhone just to access your Facebook account.
- kenough 3y agoGreat point about SMS 2FA. I've begun to go through any service that uses that and change it. I had stopped using it for new 2FA configs a few years ago once it became more obvious that it's not secure, but I figured I'd be fine for my old accounts and the odds of anything happening would be very low. Lesson learned I guess.
- mahogany 3y ago> Of course, never use SMS as a 2FA Unfortunately, I'm not aware of any US banks that have non-SMS 2FA. Happy to learn about one if it exists.
- cssanchez 3y agoUSAA is the only one I know.