News for hackers. Stuff that matters.

A comment on NIST declares the age of SMS-based 2-factor authentication over. Parent comment

Re:NIST declares the age of SMS-based 2-factor authenticatio... by greggman on Tuesday July 26, 2016 @06:07AM (#12164514)
As someone who travels SMS sucks for authentication. Maybe most people don't travel but I suspect once they do and wind up unable to access their accounts would not be too happy
[ Parent | on HN ]
Re:NIST declares the age of SMS-based 2-factor authenticatio... by gurkendoktor on Tuesday July 26, 2016 @06:45AM (#12164655)
I used to travel a lot, but even my cheap prepaid (German) SIM card had reception in most of Asia, and I haven't had any trouble with SMS 2FA. In the worst case, I've had to swap my SIM cards for a minute to receive the token.

It was a bit of a hassle, but not enough to be a showstopper.

I wonder how this is implemented - when Apple sends me an SMS 2FA code, do they pay extra because I'm abroad?

[ Parent | on HN ]
Re:NIST declares the age of SMS-based 2-factor authenticatio... by cmurf on Tuesday July 26, 2016 @09:15AM (#12165345)
No, you pay extra https://www.att.com/shop/wireless/international/roaming.html

That's mainly a texting fee since that only gets you unlimited SMS, not data or voice. If you don't get the Passport plan in advance, sent texts go from free to 50 cents each.

When I travel Europe, when I'm in the country that issued the SIM in my phone, sending texts are maybe 3 cents, if I leave that country they're maybe 9 cents. Receive was always free.

[ Parent | on HN ]