Re:FTC fines Twitter $150M for using 2FA phone numbers for a...
by account42 on Monday May 30, 2022 @04:54AM
(#31556884)
> It's objectively worse, dramatically increasing the attack surface
Any 2FA - no matter how weak - should in theory not be weaker than no 2FA. In practice of course these things can often be used as the only factor to "recover" access to an account so yes, weak 2FA like SMS can make things worse.
Any 2FA - no matter how weak - should in theory not be weaker than no 2FA. In practice of course these things can often be used as the only factor to "recover" access to an account so yes, weak 2FA like SMS can make things worse.