News for hackers. Stuff that matters.

A comment on Why even let users set their own passwords?. Parent comment

Re:Why even let users set their own passwords? by xcxcx on Saturday July 22, 2023 @01:57PM (#36828256)
Some games are zero sum and some aren't. Everyone is more secure if a large bank replaces 2FA over unencrypted SMS, even though some may be inconvenienced.

Leveling down on everyone's security in exchange for usability for a segment of the population is not a realistic long-term strategy.

[ Parent | on HN ]
Re:Why even let users set their own passwords? by hkt on Saturday July 22, 2023 @03:41PM (#36829151)
As opposed to encrypted SMS? I'm genuinely intrigued at the idea that's a thing.

As for the rest, is there any actual evidence of widespread interception of SMS 2fa actually being a problem?

[ Parent | on HN ]
Re:Why even let users set their own passwords? by xcxcx on Saturday July 22, 2023 @10:19PM (#36831994)
Not sure if you're arguing that it's a great idea to run 2FA over SMS or if you're just acting up
[ Parent | on HN ]