SMS is not 2FA-secure

Re:SMS is not 2FA-secure by fastball on Saturday January 11, 2020 @10:45AM (#22020416)

You can get a federal ID. It's called a passport card. It costs $65.

The US also has the REAL ID[0] standard that requires IDs to meet minimum standards in order to be accepted by the federal government.

If carriers just required a REAL ID compliant ID in order to get a new SIM, and actually checked it via the chip or magnetic strip, I think we'd be good.

[0] https://www.dhs.gov/real-id

[ Parent | on HN ]

Re:SMS is not 2FA-secure by CaptainZapp on Monday January 13, 2020 @10:47AM (#22035440)

You can get a federal ID. It's called a passport card. It costs $65.

Which is usually a really crappy idea when you want to save a few bucks compared to a real passport.

They're umpteen stories of heartbreak and hurt, by people not being allowed to board an international flight, or a cruise which stops at destinations not covered by a passport card.

They're also those that thought it's a great idea to get them for their kids.

With the same consequence. A passport card does not allow you to fly internationally. Not even to Mexico or Canada.

[ Parent | on HN ]

Re:SMS is not 2FA-secure by fastball on Tuesday January 14, 2020 @03:52PM (#22049124)

Obviously not, it's not a passport. It's a card.

I'm not saying use it for international travel, I'm saying use it as an ID? Literally any American citizen can get an ID card for $65 that is accepted everywhere someone asks you for ID.

If we started taking things a bit more seriously, we could also get that fee down by subsidizing it.

[ Parent | on HN ]