**<invalid character>** @[email protected] · 2018-11-16T13:22:28Z

<invalid character> @[email protected]

This is bad.

A near realtime stream of SMS messages was sitting out on a server with little to no protection.

Some messages included 2 factor authentication codes and password resets, even a password sent in plain text.

Remember this when you think text message based 2 factor authentication is good enough.

**The Kat : Hello, Elliot.** @[email protected] · Nov 16, 2018, 13:30

**The Kat : Hello, Elliot.** @[email protected] · Nov 16, 2018, 13:30

The Kat : Hello, Elliot. @[email protected]

There is literally no face/palm meme strong enough for this shit.

**<invalid character>** @[email protected] · Nov 16, 2018, 13:31

**<invalid character>** @[email protected] · Nov 16, 2018, 13:31

<invalid character> @[email protected]

@katharsys2012 - no... and worst of all, there's no telling who/what was affected

**⇄ Σ = Mᄃ² ⇆** @[email protected] · Nov 16, 2018, 15:41

**⇄ Σ = Mᄃ² ⇆** @[email protected] · Nov 16, 2018, 15:41

⇄ Σ = Mᄃ² ⇆ @[email protected]

@0x56 damnnnnnn

yip sms SFA is not a good method