Re: mobile phone + password = 2 factor auth?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Tue, May 26, 2009 at 15:13, Jeroen van Meeuwen <kanarip@xxxxxxxxxxx> wrote:
> Although this is entirely true, my bank sure considers my phone safe enough
> to send me one-time transaction confirmation codes that are only valid with
> the existing session.
>
> So, to hack this, you would need access to my phone as well as my current
> session.
>
> -Jeroen

I'm glad your bank considers your phone safe enough.  But do you?
Your bank puts the security of your money in your hands which is fine
for them because it isn't their money.

Remember, messages going through the Internet to the phone company to
your phone isn't encrypted or otherwise protected.

- Eric "Sparks"

_______________________________________________
Fedora-infrastructure-list mailing list
Fedora-infrastructure-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list

[Index of Archives]     [Fedora Development]     [Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite News]     [KDE Users]

  Powered by Linux