News for hackers. Stuff that matters.

A comment on Ask HN: Bank with Yubikey support?. Parent comment

Re:Ask HN: Bank with Yubikey support? by whitepoplar on Wednesday April 27, 2022 @03:58PM (#31184966)
Last time I checked, Vanguard's implementation is worthless because you can still request an SMS code as an alternate path.
[ Parent | on HN ]
Re:Ask HN: Bank with Yubikey support? by atonse on Wednesday April 27, 2022 @08:33PM (#31187510)
Did I miss something? Is SMS totally broken?

I know it’s not encrypted but has it suddenly become easy to intercept?

[ Parent | on HN ]
Re:Ask HN: Bank with Yubikey support? by qmarchi on Wednesday April 27, 2022 @08:53PM (#31187649)
SMS is based on SS7 signaling, which is broken pretty bad: https://www.techtarget.com/whatis/definition/SS7-attack

There's also SIM-swap attacks that rely on social engineering your carrier.

[ Parent | on HN ]
Re:Ask HN: Bank with Yubikey support? by aaaaaaaaata on Thursday April 28, 2022 @10:49AM (#31193145)
Yes, to everything except "suddenly".
[ Parent | on HN ]