this is great news and I wonder if and how this has impact on other European deployments
1,325 karma · joined November 15, 2020
oh, btw, hello NSA o/
IdentifyMobile, a provider of 2FA-SMS, shared the sent one-time passwords in real-time on the internet. The CCC happened to be in the right place at the right time and accessed the data. It was sufficient to guess the subdomain "idmdatastore". Besides SMS content, recipients' phone numbers, sender names, and sometimes other account information were visible.