3 ms·
This is why I always recommend against using SMS-based 2-factor. Without even doing any serious research, it seemed pretty obvious to me from day one that at th
by higherpurpose 12y ago
This is why I always recommend against using SMS-based 2-factor. Without even doing any serious research, it seemed pretty obvious to me from day one that at the very least someone like NSA/FBI could forge your number somehow with or without the carrier's help, but there's also the potential for other attackers to do it, too.
Call forwarding didn't even cross my mind, but it just goes to show how ridiculously broken SMS-based two-factor authentication really is then, and even worse than I thought.
Ideally what I'd want is an NFC ring or a smart band/watch that can use FIDO's U2F or a similar protocol that works through NFC, to do 2-step verification for me.
- Freaky 12y ago> Ideally what I'd want is an NFC ring or a smart band/watch that can use FIDO's U2F or a similar protocol that works through NFC I've got my eyes on a Yubikey NEO for just this kind of use: https://www.yubico.com/products/yubikey-hardware/yubikey-neo/ https://www.yubico.com/products/yubikey-hardware/yubikey-neo...
- Johnyma22 12y agoKeep your eyes on the nfc ring too http://nfcring.com http://nfcring.com
- tP5n 12y agoDid you consider the Yubikey neo, a FIDO U2F NFC/Mifare keyring + usb keyboard? it pretty much does that.
- ufmace 12y agoWhy would the FBI/NSA bother with that when whoever is doing the auth will probably give them whatever they ask for directly anyways?