Total Downloads

2,583,685

Total Files

9,206

Latest Update

10

Microsoft: Stop Using SMS for MFA

Posted November 11, 2020 | 2FA | Cloud | MFA | Microsoft Authenticator | Mobile | Windows


Microsoft this week made the case for moving away from SMS-based authentication in Multi-Factor Authentication (MFA) schemes, citing its insecurity.

“It’s time to start your move away from the SMS and voice Multi-Factor Authentication (MFA) mechanisms,” Microsoft’s Alex Weinert writes. “These mechanisms are based on publicly-switched telephone networks (PSTN), and I believe they’re the least secure of the MFA methods available today. That gap will only widen as MFA adoption increases attackers’ interest in breaking these methods and purpose-built authenticators extend their security and usability advantages. Plan your move to passwordless strong [authentication] now – the authenticator app provides an immediate and evolving option.”

As I wrote years ago, 2FA/MFA is essential, and Weinert—an actual security expert—agrees: He says that MFA is the least you can do if you are at all serious about protecting your accounts. Use of anything beyond the password significantly increases the costs for attackers, which is why the rate of compromise of accounts using any type of MFA is less than 0.1 percent of the general population.

At the time of that article linked above, I recommended using an authenticator smartphone app, like Microsoft Authenticator, noting that text messaging (SMS)-based authentication was “falling out of favor.” Here, too, Weinert agrees, but he has data that should convince any holdouts.

SMS-based authentication, he says, is transmitted in the clear, meaning that it can’t be encrypted and “can be intercepted by anyone who can get access to the switching network or within the radio range of a device.” They are easy to socially engineer, enabling an SMS form of a phishing attack in which users can unknowingly give hackers the information they need to access user accounts. And thanks to the unreliability of mobile networks, they’re unreliable, and you won’t be informed if an authentication attempt fails.

“To recap: you’re GOING to use MFA,” Weinert correctly concluded. “For most users on their mobile devices, we believe the right answer is app-based authentication. For us, that means the Microsoft Authenticator. The Authenticator uses encrypted communication, allowing bi-directional communication on authentication status, and we’re currently working on adding even more context and control to the app to help users keep themselves safe. In just the last year, we’ve added app lock, hiding notifications from the lock screen, sign-in history in the app, and more – and this list will have grown by the time you plan your deployment, and keep growing while SMS and voice keep sitting still.”

It’s good advice. Follow it.

Tagged with , ,



Source link

  • vans shoes
  • kyrie 4
  • lebron james shoes
  • kyrie irving shoes
  • puma fenty
  • lebron soldier 11
  • asics shoes
  • stephen curry shoes
  • pg shoes
  • puma fenty slides
  • lebron 14
  • kyrie 4
  • puma rihanna creepers
  • nmd human race
  • curry shoes
  • yeezy shoes
  • adidas nmd
  • lebron soldier 10
  • puma fenty
  • lebron soldier
  • lebron 15
  • kyrie 4
  • kd shoes
  • nike vapormax
  • stephen curry shoes
  • kyrie 4
  • kyrie 1
  • curry shoes
  • kyrie 2
  • adidas nmd shoes
  • stephen curry shoes
  • john wall shoes
  • http://www.kyrie4.us.com
  • adidas yeezy boost
  • yeezy boost
  • nike pg 2
  • kyrie irving shoes
  • adidas john wall
  • yeezy boost
  • j wall shoes
  • http://www.asicsshoes.us.com
  • curry 3 shoes
  • kyrie irving jersey
  • curry 3
  • kd 9
  • kd shoes
  • Kevin Durant shoes
  • http://www.kd-9.org
  • yeezy boost 350 v2
  • kd shoes
  • Curry 3
  • Curry 1
  • kevin durant shoes
  • yeezy boost
  • adidas nmd Runner
  • adidas nmd r1
  • kobe 10
  • adidas crazy explosive
  • air max 90
  • kobe 10 shoes
  • adidas nmd xr1
  • kobe shoes
  • curry one
  • kyrie irving shoes
  • adidas nmd
  • vans outlet
  • vans for sale
  • Curry 3
  • yeezy 350 boost
  • kobe bryant shoes
  • lebron soldier
  • under armour shoes
  • http://www.kyrie4.com
  • nike lebron soldier
  • adidas tubular instinct
  • vibram
  • vibram fivefingers
  • adidas tubular instinct boost
  • adidas ultra boost
  • adidas tubular
  • lebron soldier shoes
  • kids shoes
  • air jordan shoes
  • air max shoes
  • air force 1
  • nike air max
  • air max nike
  • lebron soldier shoes
  • soldier shoes
  • air max 90
  • air max 95
  • adidas nmd human race
  • nmd human race
  • kyrie 4
  • kobe 11
  • Curry One
  • Kobe Shoes
  • harden shoes
  • kobe 11 shoes
  • Curry 2
  • Harden 1
  • Curry 2
  • James Harden Shoes
  • lebron soldier
  • nike epic react
  • nike kyrie flytrap
  • nike epic react flyknit
  • lebron 10 soldier
  • nike lebron soldier
  • Curry Shoes 2015
  • Harden 1 Shoes
  • James Harden Shoes
  • Harden Shoes
  • James Harden 1
  • Under Armour Curry Shoes
  • kobe x
  • Kobe 10
  • Cheap Harden 1
  • kobe bryant shoes
  • kobe shoes
  • Lebron James Shoes
  • Cheap Curry Shoes
  • yeezy 950
  • Curry One Mvp
  • Nike Harden Shoes
  • Nike Kobe Shoes
  • Harden Shoes
  • Under Armour Store
  • Curry 2 Shoes
  • Curry Shoes
  • curry 1
  • curry 5
  • http://www.curry-5.us
  • Stephen Curry Shoes
  • Under Armour curry one
  • James Harden Shoes
  • stephen curry shoes
  • Steph Curry 1
  • Stephen Curry Shoes
  • kobe basketball Shoes
  • Nike Harden Shoes
  • fila shoes
  • fila
  • Nike James Harden Shoes
  • Harden Shoes For sale
  • Harden Shoes Sale
  • yeezy boost
  • new balance shoes
  • kanye west shoes
  • http://www.yeezyshoes.us.com
  • kobe x shoes
  • kd 8
  • adidas nmd xr1
  • balenciaga triple s
  • adidas yeezy boost
  • balenciaga triple s Shoes
  • adidas nmd r1
  • adidas yeezy outlet
  • adidas nmd
  • adidas nmd runner
  • adidas nmd pk
  • adidas nmd footlocker
  • adidas nmd r1 primeknit
  • new era caps
  • kobe bryant shoes
  • lebron soldier 11
  • kobe shoes
  • kyrie 3
  • nike kyrie 3
  • kyrie 3 shoes
  • air max shoes
  • yeezy boost
  • nike air max shoes
  • nike air max
  • kevin durant shoes
  • kd vii
  • kd 7
  • curry 3
  • curry 3 shoes
  • ua curry 3
  • curry 3 low
  • kyrie 3
  • adidas porsche shoes
  • adidas porsche design shoes
  • lebron james shoes
  • kobe shoes 2015
  • nike air shoes
  • nike air max shoes
  • kyrie 3
  • kyrie 3 shoes
  • nike kyire 3
  • cheap air max shoes
  • air max shoes
  • kd vii shoes
  • kd shoes
  • kevin durant shoes
  • adidas zx flux
  • adidas zx
  • jordan retro
  • nike soccer cleats
  • adidas tubular
  • adidas flux
  • cheap kd shoes
  • adidas ultra boost
  • kobe shoes nba
  • palladium boots
  • lebron soldier 10
  • air jordan 32
  • lebron soldier
  • lebron soldier shoes
  • kd 11
  • nike lebron soldier
  • air jordan retro/a>
  • cheap kobe shoes
  • soldier 10
  • adidas ultra boost shoes
  • adidas ultra boost
  • kevin durant shoes
  • kobe bryant shoes
  • jordan retro shoes
  • hyperdunk 2017
  • kd 7 shoes
  • porsche design shoes
  • curry 5
  • adidas porsche design
  • adidas shoes
  • kevin bryant shoes
  • kd shoes store
  • kd 7
  • Cristiano Ronaldo CR7
  • herve leger dresses
  • kobe shoes
  • curry 5 shoes
  • anello backpack
  • kobe bryant shoes
  • kd shoes
  • lebron shoes
  • kd sneaker
  • http://www.curry-5.com
  • adidas alphabounce
  • adidas boost
  • adidas d rose 7
  • jeremy scott adidas
  • nike sb dunk
  • jeremy scott wings
  • Nike CR7
  • jeremy scott shoes
  • js wings
  • lebron shoes
  • kobe shoes
  • balenciaga shoes
  • kobe bryant shoes
  • kyrie irving shoes
  • nike epic react flyknit
  • nike epic react
  • asics gel kayano 23
  • http://www.kyrie3.com
  • canada goose
  • lebron james shoes
  • asics gel kayano 22
  • Nike Lebron James Shoes
  • lebron soldier 12
  • Lebron James Shoes
  • asics gel lyte iii
  • adidas eqt
  • kd 10
  • nike kd 10
  • kyrie 3
  • adidas nmd womens
  • keen uneek sandals
  • prada shoes
  • air jordan 31
  • nike air poresto
  • nike air vapormax
  • nike huarache
  • nike vapormax shoes
  • nike mercurial
  • stephen curry shoes
  • kyrie irving shoes
  • kyrie irving basketball shoes
  • reebok pump fury
  • reebok pump superme
  • air max 270
  • kevin durant jersey
  • adidas iniki
  • adidas porsche design
  • lebron shoes
  • http://www.lebron-shoes.us
  • adidas porsche
  • wholesale hats
  • nike air more uptempo
  • kobe bryant jersey
  • wholesale caps
  • curry 5
  • http://www.curry-5.us
  • adidas superstar
  • curry 4
  • curry 4
  • kd 10
  • air max 270
  • Nike Pegasus 35
  • nike air max 270
  • adidas deerupt
  • supreme yeezys
  • nike kd 10
  • kevin durant 10
  • nike epic react
  • birkenstock sandals
  • nike epic react flyknit
  • nike kids shoes
  • adidas pure boost
  • lebron james shoes
  • calvin klein underwear
  • curry 4
  • birkenstock sandals
  • http://www.kyrie-4.com
  • curry 4 footlocker
  • http://www.birkenstocksandals.us.com
  • nmd r1
  • harden vol 2
  • stephen curry jersey
  • kobe shoes
  • nike roshe run
  • curry 4 shoes
  • new balance running shoes
  • ecco
  • childrens shoes
  • boys shoes
  • girls shoes
  • ecco Shoes
  • asics gel kayano 24
  • puma suede
  • kyrie 4 confetti
  • nike zoom vaporfly
  • birkenstock
  • mizuno shoes
  • ultra boost shoes
  • adidas clothing