Recently published research by teams from the universities of New Mexico, Arizona, Louisiana, and the firm Circle found that websites using sign‑in links and codes sent by SMS are imperiling the privacy of millions of people and leaving them vulnerable to scams, identity theft, and other crimes.
The researchers