Re:Ask HN: What are the risks of 2FA?
by jqpabc123 on Sunday June 13, 2021 @09:14AM
(#27492306)
2FA adds another layer to the security cake --- one that is often beyond your control. A 3rd party (your bank for example) usually decides that 2FA is acceptable.
Instead of protecting your password (which is fairly easy to do), now you have to protect some device from failing or being lost or being taken over by hackers (which is less easy to do).
When (not if) your phone fails, is lost or some hacker ports your number to a different phone --- then you're screwed worse than you ever were with passwords. A simple phone call is unlikely to fix it.
Instead of protecting your password (which is fairly easy to do), now you have to protect some device from failing or being lost or being taken over by hackers (which is less easy to do).
When (not if) your phone fails, is lost or some hacker ports your number to a different phone --- then you're screwed worse than you ever were with passwords. A simple phone call is unlikely to fix it.