nanog mailing list archives
Malicious SS7 activity and why SMS should never by used for 2FA
From: Eric Kuhnke <eric.kuhnke () gmail com>
Date: Sat, 17 Apr 2021 17:58:43 -0700
https://lucky225.medium.com/its-time-to-stop-using-sms-for-anything-203c41361c80 https://krebsonsecurity.com/2021/03/can-we-stop-pretending-sms-is-secure-now/ Anecdotal: With the prior consent of the DID holders, I have successfully ported peoples' numbers using nothing more than a JPG scan of a signature that looks like an illegible 150 dpi black and white blob, pasted in an image editor on top of a generic looking 'phone bill'.
Current thread:
- Malicious SS7 activity and why SMS should never by used for 2FA Eric Kuhnke (Apr 17)
- Re: Malicious SS7 activity and why SMS should never by used for 2FA Tim Jackson (Apr 17)
- Re: Malicious SS7 activity and why SMS should never by used for 2FA Mel Beckman (Apr 17)
- Re: Malicious SS7 activity and why SMS should never by used for 2FA Dan Hollis (Apr 17)
- Re: Malicious SS7 activity and why SMS should never by used for 2FA Mark Tinka (Apr 18)
- Re: Malicious SS7 activity and why SMS should never by used for 2FA Mel Beckman (Apr 18)
- Re: Malicious SS7 activity and why SMS should never by used for 2FA Mark Tinka (Apr 18)
- Re: Malicious SS7 activity and why SMS should never by used for 2FA John Adams (Apr 18)
- Re: Malicious SS7 activity and why SMS should never by used for 2FA William Herrin (Apr 18)
- Re: Malicious SS7 activity and why SMS should never by used for 2FA John Adams (Apr 18)
- Re: Malicious SS7 activity and why SMS should never by used for 2FA Mel Beckman (Apr 17)
- Re: Malicious SS7 activity and why SMS should never by used for 2FA Tom Beecher (Apr 19)
- Re: Malicious SS7 activity and why SMS should never by used for 2FA Tim Jackson (Apr 17)