The Most Expensive Lesson of My Life: Details of SIM Port Hack

Re:The Most Expensive Lesson of My Life: Details of SIM Port... by sneak on Tuesday May 21, 2019 @08:01PM (#19976397)

And U2F tokens, which are even better than TOTP as they are immune to phishing. TOTP codes can be and commonly are phished.

U2F is the current state of the art for 2FA. App/Device-based 2fa (krypton, Google App’s “approve on other device”, authy’s “approve on other device”, keybase, et c) are second.

TOTP is in a lot of ways more trouble than it is worth.

[ Parent | on HN ]

Re:The Most Expensive Lesson of My Life: Details of SIM Port... by codedokode on Wednesday May 22, 2019 @05:11AM (#19979313)

Also physical tokens can be easier to use if the support for them is built into OS and doesn't require installing or configuring additional software.

[ Parent | on HN ]