Re:Reddit Security Incident
by tptacek on Wednesday August 01, 2018 @03:26PM
(#17666076)
I don't think I'm being clear. I'm saying that in the presence of SMS 2FA, people use weaker passwords than they would otherwise. The SMS 2FA itself weakens their security: they remain vulnerable to targeted attacks and gain a vector for targeted attacks.
[ Parent
| on HN ]
Re:Reddit Security Incident
by reitanqild on Wednesday August 01, 2018 @04:03PM
(#17666434)
Do you have hard data?
My feeling after supporting end users on and off since '95 is they won't differ if they have 2FA or not.
You find examples like this all over the place:
https://security.stackexchange.com/questions/49521/does-two-...
It gets worse if you search around for people talking about how they use 2FA codes to protect their accounts when logging into services on public computers.
The perception of the security added by 2FA emboldens people to make all kinds of poor security choices.