News for hackers. Stuff that matters.

A comment on TOTP tokens on my wrist with the smartest dumb watch. Parent comment

Re:TOTP tokens on my wrist with the smartest dumb watch by UncleMeat on Tuesday October 18, 2022 @11:24AM (#33248744)
SIM swap is real but rare, since it cannot be automated. It is also largely defeated by having a strong and unique password, assuming that your provider doesn’t use SMS as a single factor password reset option.

If you’ve got a strong and unique password then your primary concern should be phishing, which is the same for sms and totp.

[ Parent | on HN ]
Re:TOTP tokens on my wrist with the smartest dumb watch by account42 on Wednesday October 19, 2022 @04:42AM (#33259294)
> assuming that your provider doesn’t use SMS as a single factor password reset option.

That's a big assumption and one that is far from generally true.

[ Parent | on HN ]