[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: SSC Advisory TSA-051 (T-mobile wireless and Verizon Northwest)

Joe Eversole wrote: 
On Wed, 11 Aug 2004 14:10:18 -0700, Secure Science Corporation
Advisory Notice <bugtraq@xxxxxxxxxxxxxxxxx> wrote:


Solution:
- ---------
Add 2-factor authentication (passcode requirement) by default and cease
implicit trust of Caller-ID information.



T-Mobile's messaging system (in Indianapolis, at least. I do not know
if they have migrated to a single VM system) has a setting the user
can specify to require passcode when calling from mobile phone.

Hence, by default! It is not on by default.



--je




--
Best Regards,
Lance James
Secure Science Corporation
www.securescience.com