4 ms·
I think some of the use-cases are getting mixed, including by myself and by the author. I do agree that 2FA, even with cell-phones, will improve the security o
by pfraze 13y ago
I think some of the use-cases are getting mixed, including by myself and by the author.
I do agree that 2FA, even with cell-phones, will improve the security of the web interface. The CloudFlare breach was caused by using the phone as an independent authenticator (overriding the password) which is not 2FA, as I understand it.
And I agree, the likelihood of SMS interception or spoofing during the verification process seems pretty slim. I'm going to bow out to the security experts at this point.
- pyre 13y agoIIRC, GSM has been cracked. I'm not an expert, so I'm not sure how this affects SMS, but as SMS is done via a control channel (that was not originally intended to be used for text messaging), I'm assuming that there are no extra protections there. Granted, this requires physical proximity though, which definitely raises the bar for any attacker.