News for hackers. Stuff that matters.
Re:Yubico launches its dual USB-C and Lightning two-factor s... by ecesena on Tuesday August 20, 2019 @01:11PM (#20749350)
> Github is an example, you can always trigger the fallback SMS 2fa code.

You can setup OTP (no SMS) and either keep it as a backup, or destroy the key. I don't have SMS on Github.

Admittedly, it won't solve issues with all services. From the service perspective, dealing with users who lost their security key (or don't have a backup one) is too painful wrt to forcing you to have an alternative.

There are no comments on this comment yet.