Two-Factor Authentication

[David E. Ross]

Somehow, I recall recently reading an online report that claimed
two-factor authentication involving cell-phone text messages was very
weak because cell-phone signals are too easily hacked and intercepted.
The report said that audio messages via land-line phones were much more
secure.

I cannot remember where I read this. Does anyone out there recall
seeing such a report?

[Bob Hansen]

Post by David E. Ross
Somehow, I recall recently reading an online report that claimed
two-factor authentication involving cell-phone text messages was very
weak because cell-phone signals are too easily hacked and intercepted.
The report said that audio messages via land-line phones were much more
secure.
I cannot remember where I read this. Does anyone out there recall
seeing such a report?

This has been mentioned on many mobile blogs and news sites. Basically SMS
has a lot of problems. This is old news. The only surprising thing is how
long companies continued to use SMS for verification. I think it's just they
wanted to collect people's phone numbers. Really nothing is secure and that
is by design. There is a lot of money making sure nobody has net privacy.
The few of us who still care about PGP or S/MIME or even SSL that works are
in the minority and we're looked at askance for even caring about our basic
human rights.

Bob

[Kjell B.]

Post by David E. Ross
Somehow, I recall recently reading an online report that claimed
two-factor authentication involving cell-phone text messages was very
weak because cell-phone signals are too easily hacked and intercepted.
The report said that audio messages via land-line phones were much more
secure.
I cannot remember where I read this. Does anyone out there recall
seeing such a report?

http://www.bing.com/search?q=nist+two-factor+sms