Thieves drain 2FA-protected bank accounts by abusing SS7 routing protocol

Re:Thieves drain 2FA-protected bank accounts by abusing SS7 ... by StavrosK on Thursday May 04, 2017 @08:00PM (#14270011)

This frustrates me endlessly about Namecheap. They only allow SMS, and, for something as valuable as my domain name (figuratively the keys to my kingdom), that's unacceptable.

[ Parent | on HN ]

Re:Thieves drain 2FA-protected bank accounts by abusing SS7 ... by tonyztan on Thursday May 04, 2017 @09:20PM (#14270427)

Have you tried using a (free) Google Voice number for 2FA purposes? Google Voice has no/minimal customer support, so it should be almost as secure as your Google Account.

[ Parent | on HN ]

Re:Thieves drain 2FA-protected bank accounts by abusing SS7 ... by StavrosK on Friday May 05, 2017 @02:48AM (#14271571)

Haha, I love the reasoning there. I haven't, but you're right, I should.

[ Parent | on HN ]

Re:Thieves drain 2FA-protected bank accounts by abusing SS7 ... by scrollaway on Saturday May 06, 2017 @05:37AM (#14279503)

Well if you manage to do that, let me know. To my knowledge creating a text/voice compatible Google Voice number is not possible in europe.

[ Parent | on HN ]

Re:Thieves drain 2FA-protected bank accounts by abusing SS7 ... by StavrosK on Sunday May 07, 2017 @06:00PM (#14287936)

I had created one when I was in the US, so I do have one. I can't add a European phone number to it, but I can receive SMS with it.

[ Parent | on HN ]

Re:Thieves drain 2FA-protected bank accounts by abusing SS7 ... by aianus on Thursday May 04, 2017 @11:56PM (#14271009)

I transfered my domain to route 53 and let them know this was the reason why.

[ Parent | on HN ]