Interesting that the data accessed was very specifically only limited to:
* A complete copy of an old database backup containing very early Reddit user data -- from the site’s launch in 2005 through May 2007
* Logs containing the email digests we sent between June 3 and June 17, 2018
Also of note:
"Already having our primary access points for code and infrastructure behind strong authentication requiring two factor authentication (2FA), we learned that SMS-based authentication is not nearly as secure as we would hope, and the main attack was via SMS intercept."
If this doesn't put the nail in the coffin of SMS-based 2FA, I'm not sure what will.
* A complete copy of an old database backup containing very early Reddit user data -- from the site’s launch in 2005 through May 2007
* Logs containing the email digests we sent between June 3 and June 17, 2018
Also of note:
"Already having our primary access points for code and infrastructure behind strong authentication requiring two factor authentication (2FA), we learned that SMS-based authentication is not nearly as secure as we would hope, and the main attack was via SMS intercept."
If this doesn't put the nail in the coffin of SMS-based 2FA, I'm not sure what will.