News for hackers. Stuff that matters.

A comment on Tell HN: SMS-based two-factor authentication is not secure. Parent comment

Re:Tell HN: SMS-based two-factor authentication is not secure by UncleMeat on Wednesday June 09, 2021 @07:41PM (#27454880)
That isn't a meaningful distinction. Both cases involve you typing in a number into a web form.
[ Parent | on HN ]
Re:Tell HN: SMS-based two-factor authentication is not secure by staticassertion on Thursday June 10, 2021 @04:06AM (#27458197)
It was a meaningful distinction to the OP...

While TOTP contains a bypass (phishing) SMS contains an additional vulnerability.

[ Parent | on HN ]