3 ms·
Feds Warn SMS Authentication Unsafe After 'Worst Hack in Our Nation's History'
- gnabgib 2y agoA continuation of the "US recommends encrypted messaging" messaging in the last few days. Just like the "don't use VPN" substory earlier[1] can we expect a story on each bullet point? Discussion (41 points, 15 days ago, 13 comments) https://news.ycombinator.com/item?id=42312998 https://news.ycombinator.com/item?id=42312998 The memo (PDF) [0] includes: - Use e2e encrypted communications - Enable FIDO - Avoid SMS MFA - Use a password manager - Set a telecom account pin - Regularly update software - Regularly update hardware - Don't use a personal VPN There's also iPhone/Android specific recommendations. [0]: https://www.cisa.gov/sites/default/files/2024-12/guidance-mobile-communications-best-practices.pdf https://www.cisa.gov/sites/default/files/2024-12/guidance-mo... [1]: https://news.ycombinator.com/item?id=42465178 https://news.ycombinator.com/item?id=42465178
- quantified 2y agoEchoing (finally) what security experts have been saying for years. Now let's see follow-through.