News for hackers. Stuff that matters.
Re:Twitter used phone numbers provided for security to targe... by grazhero99 on Tuesday August 04, 2020 @01:37PM (#24052442)
I think it should be fairly obvious to most here, but it bears repeating that any service which requires a phone number for 2FA is to be avoided like the plague.
Re:Twitter used phone numbers provided for security to targe... by ffpip on Tuesday August 04, 2020 @01:59PM (#24052649)
I hate the fact that Google requires a phone number to set up 2FA. Only then does it show the Hardware/App options.

A phone number, or an Android phone logged into the account

Re:Twitter used phone numbers provided for security to targe... by three_seagrass on Tuesday August 04, 2020 @02:44PM (#24053186)
Which companies allow 2FA without a phone number?
Re:Twitter used phone numbers provided for security to targe... by mnem on Tuesday August 04, 2020 @03:03PM (#24053358)
Most of the services I use allow it without a phone number (as SMS isn’t very secure). A bigger service that I can think of off the top of my head is GitHub.
Re:Twitter used phone numbers provided for security to targe... by jedberg on Tuesday August 04, 2020 @04:17PM (#24054062)
ETrade. Reddit. Github. Slack. Dropbox. The California DMV.
Re:Twitter used phone numbers provided for security to targe... by swebs on Tuesday August 04, 2020 @03:29PM (#24053612)
AWS
Re:Twitter used phone numbers provided for security to targe... by kanox on Tuesday August 04, 2020 @01:53PM (#24052594)
As far as I can tell most new apps require a phone merely for registration. It's not even close to optional.

Twitter pretends it doesn't but it locks you out in ~5 minutes if you don't verify your phone number.

Re:Twitter used phone numbers provided for security to targe... by zimpenfish on Tuesday August 04, 2020 @02:36PM (#24053109)
But on the plus side, if you then create another account and use the same phone number, I assume that phone number is now linked to the new account (because they tell you that it's owned by another user and it'll be claimed) and not the one you actually want to use.