News for hackers. Stuff that matters.

A comment on Twitter confirms zero-day used to expose data of 5.4M accounts. Parent comment

Re:Twitter confirms zero-day used to expose data of 5.4M acc... by fragmede on Saturday August 06, 2022 @03:03AM (#32365697)
It's true the publicized SS7 attacks brought forwards the timeline with which SMS based auth should be deprecated, but "never should have been deployed" is a bit much. There simply wasn't the infrastructure to support anything else. Hardware RSA SecurID keys from the 90's wouldn't have scaled.
[ Parent | on HN ]
Re:Twitter confirms zero-day used to expose data of 5.4M acc... by staticassertion on Saturday August 06, 2022 @10:24AM (#32368363)
When Twitter implemented its SMS 2FA TOTP was already standard.
[ Parent | on HN ]
Re:Twitter confirms zero-day used to expose data of 5.4M acc... by ASalazarMX on Saturday August 06, 2022 @10:47AM (#32368572)
Yes, but those sweet phone numbers are a valuable targeting product.
[ Parent | on HN ]