News for hackers. Stuff that matters.

A comment on Tell HN: SMS-based two-factor authentication is not secure. Parent comment

Re:Tell HN: SMS-based two-factor authentication is not secure by Wowfunhappy on Wednesday June 09, 2021 @10:18AM (#27448141)
A phone's TPM is the only U2F token that 99% of the world owns, assuming they own one at all.
[ Parent | on HN ]
Re:Tell HN: SMS-based two-factor authentication is not secure by staticassertion on Wednesday June 09, 2021 @10:25AM (#27448236)
Yes, as I've said, availability is the problem to solve. We should be shipping U2F tokens wherever we can. I'd like to see schools that require students to use GSuite and other U2F supporting sites giving students tokens for free. I'd like to see banks giving their customers tokens. I'd like to see companies giving them to employees.

IMO the problem is not "let's get some kind of 2FA" it's "let's get U2F in the hands of as many people as we can".

[ Parent | on HN ]