News for hackers. Stuff that matters.

A comment on NIST declares the age of SMS-based 2-factor authentication over. Parent comment

Re:NIST declares the age of SMS-based 2-factor authenticatio... by yuvadam on Tuesday July 26, 2016 @04:05AM (#12164039)
SMS messages are trivially interceptable remotely using SS7 vulnerabilities. These capabilites are sold off-the-shelf. Suggesting that SMS is even remotely secure is a very dangerous idea.
[ Parent | on HN ]

There are no comments on this comment yet.