News for hackers. Stuff that matters.

A comment on You don’t need SMS-2FA. Parent comment

Re:You don’t need SMS-2FA by jandrese on Wednesday July 29, 2020 @03:12PM (#23990485)
There is no help desk that can give away your TOTP secret. That’s the big weakness with SMS, someone buys a phone and asks the clerk to give them your phone number.
[ Parent | on HN ]
Re:You don’t need SMS-2FA by UncleMeat on Wednesday July 29, 2020 @03:23PM (#23990595)
It is a publicized weakness. In practice, phishing is scalable and social engineering isn’t. And humans are shit at detecting phishing attacks.
[ Parent | on HN ]