You don’t need SMS-2FA

Re:You don’t need SMS-2FA by frei on Wednesday July 29, 2020 @02:10PM (#23989805)

All the arguments in the post against SMS 2FA are also arguments against TOTP

[ Parent | on HN ]

Re:You don’t need SMS-2FA by jandrese on Wednesday July 29, 2020 @03:12PM (#23990485)

There is no help desk that can give away your TOTP secret. That’s the big weakness with SMS, someone buys a phone and asks the clerk to give them your phone number.

[ Parent | on HN ]

Re:You don’t need SMS-2FA by UncleMeat on Wednesday July 29, 2020 @03:23PM (#23990595)

It is a publicized weakness. In practice, phishing is scalable and social engineering isn’t. And humans are shit at detecting phishing attacks.

[ Parent | on HN ]