News for hackers. Stuff that matters.

A comment on Asus refunds Zenfone buyer for failing to provide bootloader unlock tools. Parent comment

Re:Asus refunds Zenfone buyer for failing to provide bootloa... by The_Colonel on Saturday April 06, 2024 @03:58PM (#39954989)
SMS 2FA is not great, but still seems to be more secure than a rooted phone.

If your SMS OTP leaks to the attacker, they still need to know the first factor (password, biometrics) to gain access.

Meanwhile, if your rooted phone is controlled by an attacker ... that's it, the attacker has everything.

[ Parent | on HN ]
Re:Asus refunds Zenfone buyer for failing to provide bootloa... by Too on Saturday April 06, 2024 @05:47PM (#39955898)
Fair. I still wouldn’t want to have such a fallback available by default. Being stronger than an even worse option doesn’t change that. Because it eliminates the security of the strongest option.
[ Parent | on HN ]