News for hackers. Stuff that matters.

A comment on US city rejects $5.3M ransom demand and restores encrypted files from backup. Parent comment

Re:US city rejects $5.3M ransom demand and restores encrypte... by ev0lv on Friday September 06, 2019 @11:36AM (#20896574)
2FA is so overrated. You can so easily do a sim swap to get access to a particular phone number and bypass 2FA.
[ Parent | on HN ]
Re:US city rejects $5.3M ransom demand and restores encrypte... by therealrootuser on Friday September 06, 2019 @11:47AM (#20896697)
The problem isn't with 2FA, the problem is with SMS-based 2FA.
[ Parent | on HN ]
Re:US city rejects $5.3M ransom demand and restores encrypte... by bonestamp2 on Friday September 06, 2019 @12:13PM (#20896925)
True, and that's why you shouldn't use SMS 2FA. The unfortunate part is when that's the only method offered.
[ Parent | on HN ]
Re:US city rejects $5.3M ransom demand and restores encrypte... by parliament32 on Friday September 06, 2019 @01:18PM (#20897574)
TOTP and HOTP 2FA are unbreakable and supported by literally everyone. Who still does SMS 2FA anymore?
[ Parent | on HN ]
Re:US city rejects $5.3M ransom demand and restores encrypte... by out_of_protocol on Friday September 06, 2019 @01:41PM (#20897818)
Lots, unfortunately. With no way to opt out
[ Parent | on HN ]