News for hackers. Stuff that matters.

A comment on Twitter confirms zero-day used to expose data of 5.4M accounts. Parent comment

Re:Twitter confirms zero-day used to expose data of 5.4M acc... by _Algernon_ on Saturday August 06, 2022 @05:34AM (#32366507)
You shouldn't be using sms as 2fa anyways. It's barely better than no 2fa at all. Use an authenticator app.
[ Parent | on HN ]
Re:Twitter confirms zero-day used to expose data of 5.4M acc... by ASalazarMX on Saturday August 06, 2022 @10:46AM (#32368551)
The workflow of most big apps is pushing to get your phone number, validating it through SMS, and after that allowing you to use other 2FA. It's stupid from a security point of view.
[ Parent | on HN ]