Re:NIST declares the age of SMS-based 2-factor authenticatio...
by rb2k_ on Tuesday July 26, 2016 @07:19AM
(#12164787)
I don't think the social engineering/sniffing is the real problem.
From what I recall the signaling system they use (SS7) is just a shitshow and everybody with $1000 can buy access somewhere in eastern Europe and send/receive all sorts of SMS.
At least that was my impression a while ago. That might be completely wrong though :)
At least that was my impression a while ago. That might be completely wrong though :)