News for hackers. Stuff that matters.
Re:IRS Will Soon Require Selfies for Online Access by seoulmetro on Wednesday January 19, 2022 @07:11PM (#30002388)
When will people learn that phone SMS verification is not 2FA.

The sim card is reproducible by third parties and there are many of them, so it's not something you have, nor something you know, or somewhere you are.

Heck, half the "2FA methods" used today aren't actually 2FA. Software tokens? Why would this be 2FA?

I think we need to rename 2FA since it clearly has lost all meaning.

There are no comments on this comment yet.