News for hackers. Stuff that matters.

A comment on Thieves drain 2FA-protected bank accounts by abusing SS7 routing protocol. Parent comment

Re:Thieves drain 2FA-protected bank accounts by abusing SS7 ... by DennisP on Thursday May 04, 2017 @01:32PM (#14266864)
Hopefully we'll get to a world where people keep a U2F key on their keychain, and use it for all their important logins.
[ Parent | on HN ]
Re:Thieves drain 2FA-protected bank accounts by abusing SS7 ... by noja on Thursday May 04, 2017 @02:32PM (#14267435)
We have a long way to go. People need to understand:

* How U2F works on their phone

* What if the U2F key gets lost or stolen (revocation)

* How to have a backup of the U2F key

* Are multiple identities possible (home/work/whatever)

[ Parent | on HN ]
Re:Thieves drain 2FA-protected bank accounts by abusing SS7 ... by DennisP on Thursday May 04, 2017 @03:34PM (#14267967)
I think a lot of this is close enough to the way mechanical keys work that it's not a huge leap. You can have more than one house key, you change the lock if a key gets stolen, etc. It's a little different, but not really more complicated.
[ Parent | on HN ]
Re:Thieves drain 2FA-protected bank accounts by abusing SS7 ... by jasikpark on Thursday May 04, 2017 @06:21PM (#14269391)
One good thing is that we are moving towards where most devices will have USB type c as a port, so that mobile devices, laptops, and desktops can all share keys.
[ Parent | on HN ]