News for hackers. Stuff that matters.

A comment on SMS is not 2FA-secure. Parent comment

Re:SMS is not 2FA-secure by konschubert on Saturday January 11, 2020 @02:11PM (#22021688)
A sim transfer/ account recovery process should come with a transition period of multiple days during which SMSs with warnings are sent to the original sim card.

On top of that, one could think of: A passphrase to authenticate a number transfer to another sim.

Sending a code through physical mail.

[ Parent | on HN ]
Re:SMS is not 2FA-secure by ahaseeb on Monday January 13, 2020 @12:04PM (#22036265)
I've implemented something like this at Dontport. There are few work arounds but again security isn't something that's on top of traditional carrier because it's a problem with a small set of people
[ Parent | on HN ]
Re:SMS is not 2FA-secure by konschubert on Monday January 13, 2020 @01:12PM (#22036974)
Nice product!

https://dontport.com/

Do you know if something like this exists in europe?

[ Parent | on HN ]
Re:SMS is not 2FA-secure by ahaseeb on Thursday January 23, 2020 @04:40PM (#22132462)
Not yet, but soon we'll launch in Europe too
[ Parent | on HN ]