News for hackers. Stuff that matters.

A comment on Facebook does not plan to notify half-billion users affected by data leak. Parent comment

Re:Facebook does not plan to notify half-billion users affec... by e3bc54b2 on Thursday April 08, 2021 @08:07AM (#26737719)
> Where does SMS get used to do payments? (...and how?)

In India, for every card transaction, for every DMAT transaction, for every password/PIN change SMS is used as 2FA. It is also mandated to require SMS 2FA for every one of these cases.

If my bank has any means to use TOTP/Yubikey, it is absolutely not made obvious, led alone clear or even possible.

[ Parent | on HN ]
Re:Facebook does not plan to notify half-billion users affec... by rincebrain on Thursday April 08, 2021 @08:12AM (#26737757)
Okay, so SMS gets used as 2FA for all those things, not somehow a primary method of creating transactions, correct?

Unfortunately, quickly looking, [1] suggests at least one of the listed services for sending arbitrarily forged SMS messages explicitly works in India, so it seems like this is still true for you. :(

[1] - https://www.usethistip.com/5-websites-to-send-anonymous-or-f...

[ Parent | on HN ]