News for hackers. Stuff that matters.

A comment on SMS Pumping Attack. Parent comment

Re:SMS Pumping Attack by weird-eye-issue on Monday August 14, 2023 @11:22AM (#37122073)
You've never done a password reset? That goes to your email. If your 2FA is over email too then that isn't 2FA. Because you only need the email to take over an entire account
[ Parent | on HN ]
Re:SMS Pumping Attack by rkeene2 on Wednesday August 23, 2023 @12:50PM (#37238815)
So I see the problem now, your model includes a hidden assumption that password resets go to email -- this is not always the case.
[ Parent | on HN ]