News for hackers. Stuff that matters.
Re:SMS 2FA is not just insecure, it's also hostile to mounta... by jabzd on Wednesday May 14, 2025 @03:57PM (#43988560)
We actually had it that way on accident in a few of our applications - we had a `#isTextable(e164)` function that would do a carrier lookup and voip carriers sometimes returned as landlines or as arbitrary values that didn't mean mobile. We eventually did some work to refine that function to be smarter and actually better represent if the number was textable. At least for us, it wasn't a conscious decision, it was a gate being aggressive in our SMS pipeline.

There are no comments on this comment yet.