Slashdot Mirror
Google To Replace SMS Codes With Mobile Prompts in 2-Step-Verification Procedure (bleepingcomputer.com)
Starting next week Google will overhaul its two-step verification (2SV) procedure and replace one-time codes sent via SMS with prompts shown on the user's smartphone. From a report: This change in the Google 2SV scheme comes after an increase in SS7 telephony protocol attacks that have allowed hackers to take over people's mobile phone numbers to receive one-time codes via SMS and break into user accounts. The rollout process for this feature is scheduled to start next week when Google will invite users to try mobile prompts instead of receiving a one-time code via SMS. Users need an Internet-connected smartphone to use this feature. Every time users will try to log in, Google will show a prompt on their phone asking the account owner to approve the login request. There's no one-time code that users have to fill in, and users can authorize a login request with the tap of a button.
The battery in a normal phone self discharges the same as the battery in a dumbphone. The lion cells don't know what kind of device they're in.
A smartphone never really sleep when its not being used. If you have a lot of apps that do background refresh, the battery life between charges is significantly shorter than a dumb phone. I've heard that the Facebook app is a notorious battery drainer.
Google has been doing phone app prompts for 2FA for a while.
If you're talking about the Google Authenticator app, then yes, this is different. I started using it on my Galaxy S7 this week.
The way it works is, you hit your username and login, and instead of a screen that asks you to type in the code you received, it basically just says "Wake up your phone." When you do, you immediately see a screen saying, "Is this you trying to login? Yes/No." You hit the Yes button and the site instantly logs you in. It's pretty slick, actually.
Breakfast served all day!
Way to be smug while simultaneously broadcasting your cluelessness. When a dumbphone is "off" it still has constant power drain because it still has hardware that is powered. How do you think the phone knows what magic button will power it on? Try powering your phone down and pressing the power button very briefly rather than holding it longer. See that cute little battery graphic with the color filling indicating percentage charge? That's because your phone never powers down completely unless you remove the battery.