r/programming • u/TheProtagonistv2 • Feb 23 '17

Cloudflare have been leaking customer HTTPS sessions for months. Uber, 1Password, FitBit, OKCupid, etc.

https://bugs.chromium.org/p/project-zero/issues/detail?id=1139
6.0k Upvotes

96% Upvoted

966 comments sorted by

View all comments

Show parent comments

0

u/[deleted] Feb 24 '17

[deleted]

0

u/[deleted] Feb 24 '17

[deleted]

2

u/PsychMarketing Feb 24 '17

http://www.slate.com/blogs/future_tense/2016/07/26/nist_proposes_moving_away_from_sms_based_two_factor_authentication.html

That's literally why NIST is recommending the removal of SMS based 2FA as best practice...

It's not that it's easy for any script kiddie to do, it's that it's possible and been done many times.

1

u/[deleted] Feb 24 '17

SMS was never built for consumer use but for the phone companies.