jjjjjjjjjjjjjjj
Joined 8 years ago
Joined 8 years ago
[0] https://www.youtube.com/@NHKWORLDJAPAN
[1] https://www.youtube.com/playlist?list=PLFEzXnIQVwV86hG7tkoVn...
1. Rate limited SMS by number/ip: bypassed by large number of proxies/vpn.
2. Added captcha: bypassed by attacker manually signing up thousands of accounts (mechanical turks?) over months and then iterating over them for login OTP.
3. Identifying what carriers/operators are involved and blocking them asap (usually obscure ones).
4. Careful monitoring of SMS send rates and alerting of anomalies to investigate.
I'm guessing it has to do with mobile users being more lucrative?
This is what my solution looks like (could be a lot cleaner, but first time writing Befunge!) https://raw.githubusercontent.com/jjjjjjjjjjjjjjjjjjjj/adven...