News for hackers. Stuff that matters.

A comment on The way people tilt their smartphone 'can give away passwords and pins'. Parent comment

Re:The way people tilt their smartphone 'can give away passw... by ZeroManArmy on Tuesday April 11, 2017 @11:57AM (#14089269)
Where would you buy one? I'd love to have one myself.
[ Parent | on HN ]
Re:The way people tilt their smartphone 'can give away passw... by skibble on Tuesday April 11, 2017 @12:27PM (#14089654)
YubiKeys are supposed to be great. I don't have one myself — been mulling it over, but not sure if I need one since I have an authenticatior app on my phone. If anyone thinks I should though I'm all ears!
[ Parent | on HN ]
Re:The way people tilt their smartphone 'can give away passw... by wruza on Tuesday April 11, 2017 @12:31PM (#14089696)
If 2fa through SMS, then maybe any dumbphone is okay?

Google 1st: https://security.stackexchange.com/questions/150153/is-a-dum...

[ Parent | on HN ]
Re:The way people tilt their smartphone 'can give away passw... by pmiller2 on Tuesday April 11, 2017 @01:02PM (#14090017)
SMS itself isn't all that secure.
[ Parent | on HN ]
Re:The way people tilt their smartphone 'can give away passw... by JadeNB on Tuesday April 11, 2017 @04:56PM (#14092350)
> SMS itself isn't all that secure.

But isn't the point of 2FA that it's OK to have each of the factors individually be (relatively) insecure—passwords being about as insecure as imagineable for most users—as long as no-one is likely to have access to both of them? Thus, it's OK if someone can read your texts, as long as they don't also know your passwords.

[ Parent | on HN ]
Re:The way people tilt their smartphone 'can give away passw... by abecedarius on Tuesday April 11, 2017 @05:30PM (#14092651)
Hackers have stolen large amounts of cryptocurrencies from individual targets because they used SMS 2FA. (If probably more money than I've ever had counts as large.) You might not be as juicy a target, but if you're reading HN I guess you're at least mildly interesting these days, this being the cyberpunk future.
[ Parent | on HN ]