News for hackers. Stuff that matters.

A comment on Security Analysis of SMS as a Second Factor of Authentication.

Re:Security Analysis of SMS as a Second Factor of Authentica... by skrowl on Tuesday November 10, 2020 @09:23AM (#25046232)
Email is also a very weak form of 2nd factor that's more popular than it should be.
[ Parent | on HN ]
Re:Security Analysis of SMS as a Second Factor of Authentica... by easton on Tuesday November 10, 2020 @09:41AM (#25046452)
Not if you are securing your email with a security key and enforcing that you can only access it from devices that meet security guidelines (as is easy to do with Office 365 and almost easy to do in GSuite). Unlike SMS, where you could lock down your phone and take every precaution and an attacker could still compromise your SIM via your carrier.
[ Parent | on HN ]
Re:Security Analysis of SMS as a Second Factor of Authentica... by lowcodetv on Tuesday November 10, 2020 @11:34AM (#25047832)
How so? (So I don't duplicate: https://news.ycombinator.com/item?id=25047668)
[ Parent | on HN ]