News for hackers. Stuff that matters.

A comment on SMS is not 2FA-secure. Parent comment

Re:SMS is not 2FA-secure by fauigerzigerk on Saturday January 11, 2020 @05:16AM (#22019179)
Use backup verification codes and a recovery email address.

Also, remember the date when you created your Google account. The best way to find that date may be to look at the first email you received in the account.

[ Parent | on HN ]
Re:SMS is not 2FA-secure by hanney on Saturday January 11, 2020 @06:57AM (#22019428)
".. a recovery email address"

This just moves your security issues to another account.. how many layers of recovery email address are you willing to go before hitting the end?

[ Parent | on HN ]
Re:SMS is not 2FA-secure by fauigerzigerk on Saturday January 11, 2020 @07:39AM (#22019576)
What you can do with email is move the problem to your most secure account or to an account that you know how to recover under essentially all circumstances.
[ Parent | on HN ]
Re:SMS is not 2FA-secure by ahaseeb on Monday January 13, 2020 @12:01PM (#22036227)
As I mentioned before that it's just convenience. SMS based authentication is flawed and is also prone to SS7 Attacks but people just do it because it's simple. Nothing in the world is hack proof
[ Parent | on HN ]