1.0ValeurBit Infosechttps://valeurbit.com/blogValeurBithttps://valeurbit.com/blog/author/valeurbit/What Mistakes in implementing SMS authentication | ValeurBit Infosecrich600338<blockquote class="wp-embedded-content" data-secret="smloYsxxu7"><a href="https://valeurbit.com/blog/what-mistakes-in-implementing-sms-authentication/">What Mistakes in implementing SMS authentication</a></blockquote><iframe sandbox="allow-scripts" security="restricted" src="https://valeurbit.com/blog/what-mistakes-in-implementing-sms-authentication/embed/#?secret=smloYsxxu7" width="600" height="338" title="“What Mistakes in implementing SMS authentication” — ValeurBit Infosec" data-secret="smloYsxxu7" frameborder="0" marginwidth="0" marginheight="0" scrolling="no" class="wp-embedded-content"></iframe><script type="text/javascript">
/* <![CDATA[ */
/*! This file is auto-generated */
!function(d,l){"use strict";l.querySelector&&d.addEventListener&&"undefined"!=typeof URL&&(d.wp=d.wp||{},d.wp.receiveEmbedMessage||(d.wp.receiveEmbedMessage=function(e){var t=e.data;if((t||t.secret||t.message||t.value)&&!/[^a-zA-Z0-9]/.test(t.secret)){for(var s,r,n,a=l.querySelectorAll('iframe[data-secret="'+t.secret+'"]'),o=l.querySelectorAll('blockquote[data-secret="'+t.secret+'"]'),c=new RegExp("^https?:$","i"),i=0;i<o.length;i++)o[i].style.display="none";for(i=0;i<a.length;i++)s=a[i],e.source===s.contentWindow&&(s.removeAttribute("style"),"height"===t.message?(1e3<(r=parseInt(t.value,10))?r=1e3:~~r<200&&(r=200),s.height=r):"link"===t.message&&(r=new URL(s.getAttribute("src")),n=new URL(t.value),c.test(n.protocol))&&n.host===r.host&&l.activeElement===s&&(d.top.location.href=t.value))}},d.addEventListener("message",d.wp.receiveEmbedMessage,!1),l.addEventListener("DOMContentLoaded",function(){for(var e,t,s=l.querySelectorAll("iframe.wp-embedded-content"),r=0;r<s.length;r++)(t=(e=s[r]).getAttribute("data-secret"))||(t=Math.random().toString(36).substring(2,12),e.src+="#?secret="+t,e.setAttribute("data-secret",t)),e.contentWindow.postMessage({message:"ready",secret:t},"*")},!1)))}(window,document);
/* ]]> */
</script>
Many online services use SMS as a user authentication mechanism. But small mistakes are made that will lead to big problems. This is what this article will be about. Introduction This authentication method is popular in b2c services, because it increases conversion, because the user does not need to remember passwords, come up with logins, but simply...