Thieves drain 2FA-protected bank accounts by abusing SS7 routing protocol

Re:Thieves drain 2FA-protected bank accounts by abusing SS7 ... by mdekkers on Thursday May 04, 2017 @02:38PM (#14267491)

My bank's 2FA literally comes on a piece of paper. A set of numbered codes, and the banking app/site tells me which code to use for any given transfer.

[ Parent | on HN ]

Re:Thieves drain 2FA-protected bank accounts by abusing SS7 ... by distances on Thursday May 04, 2017 @06:27PM (#14269441)

Yea, I have the same from two different banks. For me this seems to be the obvious 2FA solution, but comments here are mostly about elaborate technical approaches. Is there something I'm missing?

[ Parent | on HN ]

Re:Thieves drain 2FA-protected bank accounts by abusing SS7 ... by mdekkers on Friday May 05, 2017 @04:04AM (#14271848)

I was really surprised, and the first time I came across this. I gave it some thought, and concluded I am more comfortable with this solution over anything technical.

[ Parent | on HN ]

Re:Thieves drain 2FA-protected bank accounts by abusing SS7 ... by ardaozkal on Thursday May 04, 2017 @05:42PM (#14269130)

I mean, paper can't get intercepted as easily as a phone, so...

[ Parent | on HN ]