News for hackers. Stuff that matters.
Re:Keyhole – Forge own Windows Store licenses by olyjohn on Saturday September 07, 2024 @09:12AM (#41473757)
SMS is not really great.
Re:Keyhole – Forge own Windows Store licenses by throwaway48476 on Saturday September 07, 2024 @12:06PM (#41474643)
SMS is trivially exploitable. It has negative security value.
Re:Keyhole – Forge own Windows Store licenses by ivewonyoung on Saturday September 07, 2024 @02:02PM (#41475310)
Trivially? How?
Re:Keyhole – Forge own Windows Store licenses by fragmede on Saturday September 07, 2024 @04:04PM (#41476108)
I wouldn't call it trivial, but either a SS7 attack or by bribing the TMobile/Verizon/att store employee, you can get someone's SMS messages.
Re:Keyhole – Forge own Windows Store licenses by dangus on Saturday September 07, 2024 @04:06PM (#41476131)
SMS is the only 2FA method that the general public understands.

It is absolutely better than nothing even if isn’t great.