News for hackers. Stuff that matters.

A comment on I got hacked, lost crypto and what it says about Apple’s security. Part 1. Parent comment

Re:I got hacked, lost crypto and what it says about Apple’s ... by proactivesvcs on Sunday October 25, 2020 @08:03AM (#24885644)
I'm not sure if I missed something crucial (or several things?) but this seems to be entirely an essay on how SMS is an antifactor in authentication. That they're using Apple devices and services doesn't seem to factor in to it.
[ Parent | on HN ]
Re:I got hacked, lost crypto and what it says about Apple’s ... by dm319 on Sunday October 25, 2020 @09:37AM (#24886155)
what is wrong with SMS? I don't see how it is easily compromised.
[ Parent | on HN ]
Re:I got hacked, lost crypto and what it says about Apple’s ... by enhray on Sunday October 25, 2020 @11:44AM (#24887125)
Theoretically, someone could exploit a vulnerability in the SS7 [0]. I’m not sure how common these are in the wild, but it had happened before.

[0] https://en.m.wikipedia.org/wiki/Signalling_System_No._7

[ Parent | on HN ]
Re:I got hacked, lost crypto and what it says about Apple’s ... by Nextgrid on Sunday October 25, 2020 @09:55AM (#24886280)
Social engineering (or bribing) the carrier's customer service monkeys to do a SIM swap which will allow the attacker to receive your 2FA texts.
[ Parent | on HN ]
Re:I got hacked, lost crypto and what it says about Apple’s ... by proactivesvcs on Sunday October 25, 2020 @01:12PM (#24887890)
TFA is a good starter as to what is wrong with SMS. It's an authentication antifactor.
[ Parent | on HN ]