News for hackers. Stuff that matters.

A comment on HTML attributes to improve your users' two factor authentication experience. Parent comment

Re:HTML attributes to improve your users' two factor authent... by jxcl on Saturday January 11, 2020 @05:56PM (#22022972)
If you allow fallback to SMS instead of TOTP, your solution may be more secure than no 2FA, but it’s no more secure than SMS either.
[ Parent | on HN ]
Re:HTML attributes to improve your users' two factor authent... by philnash on Saturday January 11, 2020 @05:59PM (#22022987)
But as I said towards the end of the previous comment, if you deem the threat to your users great enough that targeted SMS attacks are a problem, you can turn off that fallback.
[ Parent | on HN ]