Re:Tell HN: SMS-based two-factor authentication is not secure
by dheera on Wednesday June 09, 2021 @02:09PM
(#27451119)
SMS is not a good second factor, even as a second factor.
I deprecated SMS 10 years ago and the only way I receive SMS codes is via an online interface that is password access.
For most people, SMS fails miserably when you need to change your SIM card or fly to another country, or work out of a place with no cell reception but has wired or wi-fi internet access. That's a big part of the reason why I deprecated it in favor of e-mail, which works flawlessly anywhere in the world you have an internet connection.
I only support U2F or TOTP based 2FA and it's upto providers to get with the beat if they want me to use real 2FA.
I deprecated SMS 10 years ago and the only way I receive SMS codes is via an online interface that is password access.
For most people, SMS fails miserably when you need to change your SIM card or fly to another country, or work out of a place with no cell reception but has wired or wi-fi internet access. That's a big part of the reason why I deprecated it in favor of e-mail, which works flawlessly anywhere in the world you have an internet connection.
I only support U2F or TOTP based 2FA and it's upto providers to get with the beat if they want me to use real 2FA.