Yet another example of why SMS is terrible for 2fa and account recovery.
"the database — running on Amazon’s Elasticsearch — was configured with a Kibana front-end, making the data within easily readable"
https://techcrunch.com/2018/11/15/millions-sms-text-messages-leaked-two-factor-codes/
-
-
@aaronpk had to make the case against sms 2fa this week but nowadays a simple websearch for the phrase returns mostly negative articles so it was easier than expected.
Posted in
/notes
using
quill.p3k.io
@aaronpk You and I have had some conversation recently about the degree to when we do and don't want to use bearer token systems (I think we're both for them in some cases/ways and wary in others? but the division seems unclear), and the frequency of DB leaks may also be a good indicator in some places