Tell HN: SMS-based two-factor authentication is not secure

Re:Tell HN: SMS-based two-factor authentication is not secure by cik on Wednesday June 09, 2021 @10:52AM (#27448576)

Exactly this. Here in Israel, SMS is used extensively as part of a multi-factor authentication system. I also require my National ID.

To move my phone number (consent or not) between any phone companies requires an SMS, my National ID, and verification of my ID, and personal details in the government database.

SMS by itself is not secure.

[ Parent | on HN ]

Re:Tell HN: SMS-based two-factor authentication is not secure by tinus_hn on Wednesday June 09, 2021 @12:28PM (#27449853)

You can’t control some random guy in a provider store giving out a new sim for your account, whether maliciously or because they were deceived.

[ Parent | on HN ]

Re:Tell HN: SMS-based two-factor authentication is not secure by 2rsf on Wednesday June 09, 2021 @11:30AM (#27449079)

And still numbers are being hijacked even in Israel [1], and even in Sweden, where I live now, I swept my SIM without my ID being properly checked

[1] https://www.gov.il/he/departments/news/sim

[ Parent | on HN ]

Re:Tell HN: SMS-based two-factor authentication is not secure by cik on Wednesday June 09, 2021 @11:42AM (#27449227)

Absolutely. This is the problem - it's not the ideal method.

[ Parent | on HN ]