Re:Exploit broker Zerodium ups the ante with $500k to target...
by w8rbt on Thursday August 24, 2017 @08:38AM
(#15089561)
I expect two factor authentication over cellular networks (SMS and voice callbacks) to be commonly exploited in a year. Orgs really need to force OATH (HOTP, TOTP) and FIDO (U2F, UAF) and begin transitioning away from cellular two factor.
[ Parent
| on HN ]
Re:Exploit broker Zerodium ups the ante with $500k to target...
by ihattendorf on Thursday August 24, 2017 @05:03PM
(#15094036)
The problem that I haven't seen a good answer to, is what happens when (not if) the customer loses their 2nd factor device? If someone loses their phone, they can still keep their same number and receive an SMS verification on their new phone. With OATH/FIDO, that won't happen.