Page MenuHomePhabricator

Improve MFA security by using replacing SMS code digits with emoji
Open, LowPublic

Assigned To
None
Authored By
epriestley
Feb 2 2019, 6:46 PM
Referenced Files
None
Tokens
"Burninate" token, awarded by amckinley."Y So Serious" token, awarded by leoluk."Party Time" token, awarded by avivey.

Description

It turns out that emoji work fine over SMS.

Current less-secure behavior:

Your MFA code is: 01234567

Proposed more-secure behavior:

Your MFA code is: ๐Ÿ‘ ๐Ÿ ๐Ÿ† ๐ŸŽ ๐ŸŽบ ๐Ÿถ ๐Ÿ’ฏ ๐Ÿš‘

This seems like a strictly better scheme.

Event Timeline

epriestley created this task.
epriestley renamed this task from Improve MFA security by using replacing digits with emoji to Improve MFA security by using replacing SMS code digits with emoji.Feb 2 2019, 6:46 PM