Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)BR
brie @ brie @programming.dev
Posts
0
Comments
63
Joined
7 mo. ago

Feds Warn SMS Authentication Is Unsafe After ‘Worst Hack in Our Nation’s History’

Jump

  • Proton is already used for identity management: OTP via email. They'll implement OAuth if there's enough demand for it. A company's purpose is to be profitable, ethics side is largely irrelevant.

    Many countries already have digital government ID: Australia, Estonia, Russia.

    • Feds Warn SMS Authentication Is Unsafe After ‘Worst Hack in Our Nation’s History’

    Jump

  • Watch the video again to see how hard it was for Derrick to get access. He got it via his telecom/academia researcher contact.

    • Feds Warn SMS Authentication Is Unsafe After ‘Worst Hack in Our Nation’s History’

    Jump

  • S7 will be retired or extended with access control. TOTP apps don't work for edge cases like broken phone. Dedicated token devices get lost. SMS will continue being the main solution for 2FA.

    • Feds Warn SMS Authentication Is Unsafe After ‘Worst Hack in Our Nation’s History’

    Jump

  • Not true. SMS is encrypted in 3G, LTE, 5G. Block cyphers like Kasumi and A/9 are used. SMS is reasonably secure, because it's hard to infiltrate telecom systems like S7