SoylentNews is people
SoylentNews
An article in TechCrunch describes changes that the National Institute for Standards and Technology (NIST) is considering to its Digital Authentication Guideline:
For now, services can continue with SMS as long as it isn't via a service that virtualizes phone numbers — the risk of exposure and tampering there might be considered too great. NIST isn't telling for now, but more info will come out as the comment period wears on. But before long all use of SMS will be frowned on, as the bolded passage clearly indicates.
Additional comments are available on Bruce Schneier's blog.
This discussion has been archived.
No new comments can be posted.
NIST Recommends Against Using SMS for 2-Factor Authentication
|
Log In/Create an Account
| Top
| 12 comments
| Search Discussion
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
Can anyone remember when the times were not hard, and money not scarce?
(Score: 2) by Snotnose on Saturday August 06 2016, @04:06AM
I really wish I could edit a post within a minute or two of submitting it. Or get better with the preview button.
When the dust settled America realized it was saved by a porn star.
(Score: 2, Funny) by tftp on Saturday August 06 2016, @06:09AM
I really wish I could edit a post within a minute or two of submitting it.
You can already, and it is very easy:
> diff -u foo1 foo2
--- foo1 2016-08-05 23:01:54.475719756 -0700
+++ foo2 2016-08-05 23:02:34.796049558 -0700
@@ -1,5 +1,5 @@
Now, some 20+ years later, I get unlimited messaging, some data cap
-I never go anywhere near reaching, and 60 minutes of talk time.
+I never go anywhere near reaching, and 600 minutes of talk time.
I average maybe 10 minutes/month of talk time. Unfortunately,
Anyone who cares can apply the patch - and you may choose to not care about the rest :-)