[36102] in bugtraq
Re: SSC Advisory TSA-051 (T-mobile wireless and Verizon Northwest)
daemon@ATHENA.MIT.EDU (Joe Eversole)
Thu Aug 12 13:22:16 2004
Message-ID: <3d91e7f90408112133fbd6c54@mail.gmail.com>
Date: Wed, 11 Aug 2004 23:33:25 -0500
From: Joe Eversole <jeversol@gmail.com>
Reply-To: joe@recompiled.org
To: bugtraq@securityfocus.com
In-Reply-To: <411A8B3A.8040202@securescience.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
On Wed, 11 Aug 2004 14:10:18 -0700, Secure Science Corporation
Advisory Notice <bugtraq@securescience.net> wrote:
> Solution:
> - ---------
> Add 2-factor authentication (passcode requirement) by default and cease
> implicit trust of Caller-ID information.
T-Mobile's messaging system (in Indianapolis, at least. I do not know
if they have migrated to a single VM system) has a setting the user
can specify to require passcode when calling from mobile phone.
--je
