3 ms·
It also states that SMS is not "phishing-resistant." I've received SMS messages that were phishing attempts at stealing my authentication credentials. It's also
by TYPE_FASTER 2y ago
It also states that SMS is not "phishing-resistant." I've received SMS messages that were phishing attempts at stealing my authentication credentials. It's also possible to re-route SMS messages via SIM swapping, SIM hijacking, or other methods (https://www.schneier.com/blog/archives/2021/03/easy-sms-hijacking.html https://www.schneier.com/blog/archives/2021/03/easy-sms-hija...).
SMS is just not designed to be used as an authentication mechanism. We have more secure mechanisms now.