Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> On the contrary, most customers are under automated attacks, and SMS plus password leaks lets that takeover be fully automated.

Are you implying there's automated SIM swap attacks in the wild ? Or, maybe you are saying SMS can be phished ? I do agree SMS 2nd factor can be phished, but if phishing is the attack, password leaks is irrelevant since, you usually phish both passwords and SMS 2nd factor together, so password leaks don't make any difference.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: