News for hackers. Stuff that matters.
Re:Tell HN: SMS-based two-factor authentication is not secure by baybal2 on Wednesday June 09, 2021 @01:58PM (#27451012)
I want warn people about U2F.

U2F is only an authentication tool, not security/encryption one.

If you have your smartphone/browser/pc pwned, you are even more screwed than with offline key table/token.

For something truly security critical, you need security against MITM on your own device, which only leaves smartcards as an option.

There are no comments on this comment yet.