News for hackers. Stuff that matters.

A comment on Ask HN: Does anyone else think this 2FA everywhere is getting out of hand?. Parent comment

Re:Ask HN: Does anyone else think this 2FA everywhere is get... by teknopaul on Friday March 18, 2022 @10:59AM (#30723140)
Of course the real reason for 2fa over sms, is that companies want your phone number as well as your email address.
[ Parent | on HN ]
Re:Ask HN: Does anyone else think this 2FA everywhere is get... by toast0 on Friday March 18, 2022 @01:36PM (#30725121)
Sure, they may have nefarious purposes. But it's also because most people have a working recovery path when they drop their phone in the river.

2FA without a recovery path that people will actually prepare for is a recipie for locked out users, and that's going to mean your customer service gets all the sad stories and hopefully has no ability to do anything about them.

[ Parent | on HN ]
Re:Ask HN: Does anyone else think this 2FA everywhere is get... by smilespray on Friday March 18, 2022 @11:01AM (#30723155)
It's because just about everybody has a phone.
[ Parent | on HN ]
Re:Ask HN: Does anyone else think this 2FA everywhere is get... by texasbigdata on Friday March 18, 2022 @11:23AM (#30723441)
It's because, unlike email, phones are approximately 1:1 to humans.
[ Parent | on HN ]