Thieves drain 2FA-protected bank accounts by abusing SS7 routing protocol

Re:Thieves drain 2FA-protected bank accounts by abusing SS7 ... by noja on Thursday May 04, 2017 @02:32PM (#14267435)

We have a long way to go. People need to understand:

* How U2F works on their phone

* What if the U2F key gets lost or stolen (revocation)

* How to have a backup of the U2F key

* Are multiple identities possible (home/work/whatever)

[ Parent | on HN ]

Re:Thieves drain 2FA-protected bank accounts by abusing SS7 ... by DennisP on Thursday May 04, 2017 @03:34PM (#14267967)

I think a lot of this is close enough to the way mechanical keys work that it's not a huge leap. You can have more than one house key, you change the lock if a key gets stolen, etc. It's a little different, but not really more complicated.

[ Parent | on HN ]