Are you thinking about U2F or something more?

Here is a helpful discussion including using the Yubikey Neo NFC with Android phones and alternatives to Yubikey: https://news.ycombinator.com/item?id=13635433

Things like that, yes, thanks for the link. I've vaguely heard about these devices but not yet properly researched them.

What broadcom wifi 'thing' are you referring to? Guess I missed that piece of history.

Ah. Thanks to you both.

Every single cellphone that uses broadcom wifi (basicly all of them) has remote root via wifi. 95% will never be patched.

At least there is 5%(Nexus and Pixel) that get patched. The baseband is wide open on 100% of cellphones with a SIM card in them, and it's never getting patched.

Thats ignoring that GSM and friends are still broken, so your device being rooted is stilp only half the issue.

Where would you buy one? I'd love to have one myself.

YubiKeys are supposed to be great. I don't have one myself — been mulling it over, but not sure if I need one since I have an authenticatior app on my phone. If anyone thinks I should though I'm all ears!

If 2fa through SMS, then maybe any dumbphone is okay?

Google 1st: https://security.stackexchange.com/questions/150153/is-a-dum...

SMS itself isn't all that secure.

> SMS itself isn't all that secure.

But isn't the point of 2FA that it's OK to have each of the factors individually be (relatively) insecure—passwords being about as insecure as imagineable for most users—as long as no-one is likely to have access to both of them? Thus, it's OK if someone can read your texts, as long as they don't also know your passwords.

Hackers have stolen large amounts of cryptocurrencies from individual targets because they used SMS 2FA. (If probably more money than I've ever had counts as large.) You might not be as juicy a target, but if you're reading HN I guess you're at least mildly interesting these days, this being the cyberpunk future.

My bank used to ship a credit card size device that does 2fa.