News for hackers. Stuff that matters.
Re:Google introduces mandatory 2-Step Verification for Googl... by r0m4n0 on Wednesday November 03, 2021 @09:48PM (#29102803)
No… Well I guess if you were adding SMS as a 2fa option to your real 2fa would increase surface but that wouldn’t solve what the parent comment was saying. So yea don’t do that (but it’s better than just a password).

1)Password alone is weak. 2)Password and SMS 2fa better. 3)Password and real 2fa best. 4)Password, real 2fa, backup codes, basically just as good as best.

Google is only eliminating #1, and only requires 2fa when logging into a new device. I’m surprised HN folks are having a tough time grasping this one, in general it’s pushing people (I’d guess 90% of people would never opt into anything more than a regular password, including the parent) into #2 above.

Parent should do #4, but #2 is fine

There are no comments on this comment yet.