SecurityFocus

SSC Advisory TSA-051 (T-mobile wireless and Verizon Northwest) Aug 11 2004 09:10PM
Secure Science Corporation Advisory Notice (bugtraq securescience net) (2 replies)

Re: SSC Advisory TSA-051 (T-mobile wireless and Verizon Northwest) Aug 12 2004 09:04PM
Brad Herbert (bherbert earthwastesystems com)

Re: SSC Advisory TSA-051 (T-mobile wireless and Verizon Northwest) Aug 12 2004 04:33AM
Joe Eversole (jeversol gmail com) (1 replies)

Re: SSC Advisory TSA-051 (T-mobile wireless and Verizon Northwest) Aug 12 2004 11:34PM
Lance James (lancej securescience net)

Joe Eversole wrote:
> On Wed, 11 Aug 2004 14:10:18 -0700, Secure Science Corporation
> Advisory Notice <bugtraq (at) securescience (dot) net [email concealed]> wrote:
>
>
>>Solution:
>>- ---------
>>Add 2-factor authentication (passcode requirement) by default and cease
>>implicit trust of Caller-ID information.
>
>
> T-Mobile's messaging system (in Indianapolis, at least. I do not know
> if they have migrated to a single VM system) has a setting the user
> can specify to require passcode when calling from mobile phone.

Hence, by default! It is not on by default.

>
> --je
>
>

--
Best Regards,
Lance James
Secure Science Corporation
www.securescience.com

[ reply ]