4 ms·
E-SIM SIM-Swapping Attack
- ijidak 2y agoOk. So, this community has a lot of knowledge with respects problems like this. What are your thoughts regarding how to protect ones self from this type of attack? This is a bleeding edge problem. It goes after 2-factor auth, and it's likely to become more common.
- toomuchtodo 2y agoDo not use SMS or voice for MFA. These are weak MFA factors. Push notification auth to app only, requiring biometrics to approve. Secure hardware tokens are a gold standard, but rare. If your bank or financial services provider leverages SMS/voice for MFA, they’re setting you up to fail. Switch providers, they’re dumping the liability on their customers. https://2fa.directory/us/ https://2fa.directory/us/ (I own customer identity requirements at a fintech, thoughts and opinions my own)
- rvz 2y ago> What are your thoughts regarding how to protect ones self from this type of attack? Never ever use SMS 2FA Auth or if you provide a login system, do not offer it as an option.
- 1oooqooq 2y agomost are moving to passwordless. also known as passkey, or 3rd-party-password-overlord, or not-your-password-anymore. just kidding. it's only apple and Microsoft. meanwhile EU commission just removed OTP option from their SSO and forced you to move to SMS