Home Creators Posts Import Register Favorites Logout
haven't archived this post yet. have a subscription? use the importer!

Content

Watch my new episode here! https://youtu.be/L5V9JDG3cfQ

Files

Previews only

2FA Isn’t Secure - Here’s What You Need Instead!

Use code “SHANNON” for $5 off ANY YubiKey 5 Series or Security Key Series purchase! Valid til 3/31/23 Get a Yubikey and protect your accounts! https://www.pjatr.com/t/SENKSk5PS05DSEdGR0ZJQ0dPR0tNSw * FTC: Links marked with * are affiliate links, which means I make a small commission off any sales. References: https://fidoalliance.org/specs/u2f-specs-1.0-bt-nfc-id-amendment/fido-u2f-implementation-considerations.html#token-counters https://www.pcmag.com/news/hacking-fingerprints-is-actually-pretty-easy-and-cheap https://www.reddit.com/r/reddit/comments/10y427y/we_had_a_security_incident_heres_what_we_know/ https://www.protocol.com/bulletins/uber-breach-hacker-twilio-mfa https://blog.cloudflare.com/2022-07-sms-phishing-attacks/ https://techcrunch.com/2022/10/28/twilio-june-data-breach/ https://www.zdnet.com/article/should-you-worry-about-hackers-cloning-your-2fa-hardware-security-keys/ https://blog.twitter.com/en_us/topics/product/2023/an-update-on-two-factor-authentication-using-sms-on-twitter Becoming a Morse Code Member by checking out the perks linked here!: https://www.youtube.com/channel/UCNofX8wmSJh7NTklvMqueOA/join 💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜 SUBSCRIBE! 🌸 http://www.youtube.com/ShannonMorse?sub_confirmation=1 TWITTER 🌸 http://www.twitter.com/snubs Patreon 🌸 https://www.patreon.com/ShannonMorse 💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜 SUPPORT MY WORK Patreon 💛 https://www.patreon.com/ShannonMorse Buy Me a Coffee 💛 https://www.buymeacoffee.com/snubs Shop 💛 https://snubsie.com/shop TeeSpring 💛 https://teespring.com/stores/morsecode Coupon Codes 💛 https://snubsie.com/support Tech I Use & Recommend 💛 https://kit.co/ShannonMorse 💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜 FOLLOW THE SOCIALS THINGS Twitter 🌸 http://www.twitter.com/snubs Instagram 🌸 http://www.instagram.com/snubs YouTube 🌸 http://www.youtube.com/ShannonMorse?sub_confirmation=1 Website 🌸 http://www.shannonrmorse.com 💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜 TECH I USE AND RECOMMEND My Kits, Builds, and Must Haves ✨ https://kit.co/ShannonMorse My Amazon Influencer Page ✨ https://www.amazon.com/shop/shannonmorse 💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜 MY OTHER SHOWS ThreatWire 🌙 http://www.youtube.com/hak5?sub_confirmation=1 Sailor Snubs 🌙 https://www.youtube.com/sailorsnubs?sub_confirmation=1 💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜 GET IN TOUCH Mail ✈ https://snubsie.com/contact Email for Business and Sponsorship Inquiries ✈ Shannon@ShannonRMorse.com My Media Kit ✈ https://snubsie.com/work-with-me Sponsor This Channel ✈ https://snubsie.com/shannon-morse Music from 🎵 Epidemic Sound: https://www.epidemicsound.com/referral/wpbzny/ 💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜 😍 FTC DISCLAIMER 😍 Affiliate links listed above allow me to receive a small commission. Any sponsorships for videos are noted in video and listed in descriptions. Any products provided as gifts are listed above. Thank you for your support! Comment section code of conduct policy: Constructive feedback is appreciated, but please leave unproductive, divisive and harmful conversation at the door. Hateful comments are not tolerated, and these kinds of messages will be automatically removed. Thank you for making this community a welcoming experience for all viewers :) https://snubsie.com/code-of-conduct

Comments

veritanuda

Yup.. Hardware tokens are best. OTA apps are ok. SMS verification is shite. I do not subscribe to biometrics as security tokens. Biometric data may be unique to you, but is it not exclusive. And as such should NEVER be used as a security token. You leave your fingerprints and DNA everywhere you go. Your face is recorded on 100's of cameras a day, and your iris, fingerprints and face can all be extracted from online photos. Biometrics is security theatre at best and should never be counted on because it is the one security vector that if compromised in any way cannot be changed. Also, phone SMS 2FA is known to be insecure as well, partly because there is no security inherent in SMS but also because a telephone number is not tied to a particular device and basic social engineering can fool providers to changing ownership. So, see line 1.

Anonymous

Excellent information! Thank you, Shannon!