News for hackers. Stuff that matters.
Re:You don’t need SMS-2FA by jedimastert on Wednesday July 29, 2020 @02:17PM (#23989898)
> It seems to me that SMS-2FA helps in this scenario. Am I missing something obvious?

It's not necessarily scalable, but sim-swapping[0] is still an unfortunately serious issue. Phone numbers are not proof of identity

[0]: https://en.wikipedia.org/wiki/SIM_swap_scam

Re:You don’t need SMS-2FA by ldiracdelta on Thursday July 30, 2020 @12:17AM (#23994628)
Security is an economic effort. They have to have two things now, which at least doubles the difficulty if not even more. We dont drive tanks and wear helmets and use a 5-point harness while driving at 15 mph to get around, because we have to actually get things done with our tools and systems without going bankrupt or starving to death.
Re:You don’t need SMS-2FA by RcouF1uZ4gsC on Wednesday July 29, 2020 @02:25PM (#23989997)
But sim swapping is more a targeted attack. There are probably several orders of magnitude more opportunistic attacks than targeted attacks.

If you can make opportunistic attacks fail and require targeted attacks, you still have a big advantage.