Re:You don’t need SMS-2FA
by ldiracdelta on Thursday July 30, 2020 @12:17AM
(#23994628)
Security is an economic effort. They have to have two things now, which at least doubles the difficulty if not even more. We dont drive tanks and wear helmets and use a 5-point harness while driving at 15 mph to get around, because we have to actually get things done with our tools and systems without going bankrupt or starving to death.
Re:You don’t need SMS-2FA
by RcouF1uZ4gsC on Wednesday July 29, 2020 @02:25PM
(#23989997)
But sim swapping is more a targeted attack. There are probably several orders of magnitude more opportunistic attacks than targeted attacks.
If you can make opportunistic attacks fail and require targeted attacks, you still have a big advantage.
It's not necessarily scalable, but sim-swapping[0] is still an unfortunately serious issue. Phone numbers are not proof of identity
[0]: https://en.wikipedia.org/wiki/SIM_swap_scam