News for hackers. Stuff that matters.
Re:Using your SIM card for MFA when logging in to an SSH server by GregHolmes on Monday August 15, 2022 @11:34AM (#32471008)
No, the check url created from the request is made by the mobile network operator assigned to that phone number.

The mobile device makes the GET request to that check url over a cellular data request. The MNO verifies the phone number assigned to that sim card making that data request matches phone number used in the creation of that check url.

There are no comments on this comment yet.