News for hackers. Stuff that matters.

A comment on Backdoor in upstream xz/liblzma leading to SSH server compromise. Parent comment

Re:Backdoor in upstream xz/liblzma leading to SSH server com... by eru on Saturday March 30, 2024 @01:20AM (#39872064)
Number transfers in other countries is also mostly just a question of a bit of social engineering.
[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by throwaway2990 on Saturday March 30, 2024 @03:09AM (#39872539)
No. Most require some form of identification or matching identification between mobile providers.
[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by macrolime on Saturday March 30, 2024 @11:39AM (#39875875)
I recently had an issue with a sim card and went to phone store that gave me a new one and disabled the old. They're supposed to ask for ID, but often doesn't bother. This is true for pretty much every country. Phone 2FA is simply completely insecure.
[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by eru on Saturday March 30, 2024 @09:16PM (#39880423)
If the ID matching is done by humans, you can use social engineering on it.

See the sibling comment.

[ Parent | on HN ]