Re:Thieves drain 2FA-protected bank accounts by abusing SS7 ...
by hdhzy on Thursday May 04, 2017 @04:10PM
(#14268316)
> so long as you can convince your phone company that you are you you're fine.
Well I think the problem starts when someone else convinces your phone company that they are you. As we've seen several times now it becomes easier and easier to pull this trick.
As for U2F add more than one to your account (2 is minimum) and you are safe. The same applies to any kind of physical key (home, car, etc.)
Re:Thieves drain 2FA-protected bank accounts by abusing SS7 ...
by andrewvc on Thursday May 04, 2017 @10:30PM
(#14270707)
I think there are plenty more people who would lose all their u2f keys than be attacked via the phone company. Sure, that's easy for you to manage, but not for most people.
Well I think the problem starts when someone else convinces your phone company that they are you. As we've seen several times now it becomes easier and easier to pull this trick.
As for U2F add more than one to your account (2 is minimum) and you are safe. The same applies to any kind of physical key (home, car, etc.)