News for hackers. Stuff that matters.

A comment on Keyhole – Forge own Windows Store licenses. Parent comment

Re:Keyhole – Forge own Windows Store licenses by throwaway48476 on Saturday September 07, 2024 @12:06PM (#41474643)
SMS is trivially exploitable. It has negative security value.
[ Parent | on HN ]
Re:Keyhole – Forge own Windows Store licenses by ivewonyoung on Saturday September 07, 2024 @02:02PM (#41475310)
Trivially? How?
[ Parent | on HN ]
Re:Keyhole – Forge own Windows Store licenses by fragmede on Saturday September 07, 2024 @04:04PM (#41476108)
I wouldn't call it trivial, but either a SS7 attack or by bribing the TMobile/Verizon/att store employee, you can get someone's SMS messages.
[ Parent | on HN ]
Re:Keyhole – Forge own Windows Store licenses by dangus on Saturday September 07, 2024 @04:06PM (#41476131)
SMS is the only 2FA method that the general public understands.

It is absolutely better than nothing even if isn’t great.

[ Parent | on HN ]