Re:Tell HN: SMS-based two-factor authentication is not secure
by chc on Wednesday June 09, 2021 @04:41PM
(#27452942)
They specifically said "SMS as a second factor." What you're discussing here is a completely different different use of SMS that nobody is arguing in favor of.
[ Parent
| on HN ]
Re:Tell HN: SMS-based two-factor authentication is not secure
by jjav on Wednesday June 09, 2021 @06:48PM
(#27454333)
As I mentioned, there is no guarantee any site is going to never allow use of that phone, once it's on file, to bypass authentication. Even if they don't right now. So adding a phone to an account increases your risk in a way you can't control. The only guaranteed way to avoid it is to never have a phone# on file.