hacka22
Joined 6 years ago
Karma
1,325
Submissions
53
Member since
Nov 15
Recent submissions
Comment · 1 year ago
this is great news and I wonder if and how this has impact on other European deployments
Comment · 1 year ago
you forgot to mention that Cloudflare is the by far the largest MITM operation on this planet
oh, btw, hello NSA o/
Comment · 2 years ago
more background: https://www.ccc.de/en/updates/2024/2fa-sms
IdentifyMobile, a provider of 2FA-SMS, shared the sent one-time passwords in real-time on the internet. The CCC happened to be in the right place at the right time and accessed the data. It was sufficient to guess the subdomain "idmdatastore". Besides SMS content, recipients' phone numbers, sender names, and sometimes other account information were visible.