Your phone and its associated number are always with you, and only you, so it makes sense that a text message sent to you is a solid secondary method for authenticating a login. But savvy tech users know this method of verification is rife for exploitation: SIM jacking, SS7 attacks, and other hacking methods are now common. A recent investigation showed that it's possible to perform similar attacks with readily-available marketing tools, with the victim none the wiser.
If you want to find weaknesses in your vault or safe, it couldn't hurt to hire a thief to try and break into it. If you want to do the same thing for your brand new system-on-a-chip, the same principle applies to hackers and security experts. So goes the thinking behind Qualcomm's latest outreach to the security industry: a bug bounty program offering prizes of up to $15,000 for disclosed vulnerabilities in the company's Snapdragon chipsets and LTE modems.