pull down to refresh

AI is becoming a problem with authentication. I never heard of glide.id and I am curious to know how this works!

Why won’t people just use TOTP

reply

What is TOTP?

reply

It stands for Time-based One Time Password. it’s what you use when you use an Authenticator app that generates a code good for 30 seconds, then make a new one, etc. it works offline, no sending needed beyond one time setup

reply
359 sats \ 0 replies \ @justin_shocknet 4 Aug -840 sats

I believe it's from phishing where users give challenge codes to AI generated impersonators

Since the SMS code goes to the device with the SIM for that number, they can just ping it directly and remove human error from the loop and ensure the device being authenticated belongs to the user.

... Until your carrier gets social engineered and you get SIM swapped