Ask HN: How can techies influence companies to stop implementing SMS/phone 2FA

Re:Ask HN: How can techies influence companies to stop imple... by t_sawyer on Wednesday November 02, 2022 @09:56AM (#33435808)

Are you advocating for OTP 2FA? If so, your concern about losing your phone and losing access to your accounts is still an issue.

At the end of the day, OTP is more secure for the obvious issue with mobile carriers being phished into SIM jacking. But, I've personally had 0 luck convincing any business person that OTP is the best thing to use because (and this is a true statement) users are dumb and lazy and don't want to go through the process of downloading an app on their phone and setting up OTP. Plugging in your phone number for SMS is way easier.

[ Parent | on HN ]

Re:Ask HN: How can techies influence companies to stop imple... by bombcar on Wednesday November 02, 2022 @10:15AM (#33436146)

TOTP can be stored in things like 1password and shared between devices, if you want.

I don't mind if SMS is an option, but I would prefer it not be the only option and certainly not the only backup option (weakest link and all that).

[ Parent | on HN ]

Re:Ask HN: How can techies influence companies to stop imple... by mousetree on Wednesday November 02, 2022 @09:58AM (#33435842)

You mean TOTP in an authenticator app right? To my knowledge SMS 2FA sends you an OTP

[ Parent | on HN ]

Re:Ask HN: How can techies influence companies to stop imple... by t_sawyer on Wednesday November 02, 2022 @10:02AM (#33435914)

Yes sorry TOTP.

[ Parent | on HN ]