23/05/2017

2 factor authentication is insecure

By ben sim

2 factor authentication is a procedure whereby an individual is required to key in both his password and random generated one time password(OTP) for a logon process. this is mostly applied to internet banking and email logon. but there is a security loophole discovered recently. it was found that the random numbers that are either sent to you via sms can be sniffed or hacked. the below links describe what actually happen and biometric may be the answer for future 2 factor authentication.

http://thehackernews.com/2016/07/two-factor-authentication.html

https://www.wired.com/2016/06/hey-stop-using-texts-two-factor-authentication/