News for hackers. Stuff that matters.

A comment on Ask HN: How can techies influence companies to stop implementing SMS/phone 2FA. Parent comment

Re:Ask HN: How can techies influence companies to stop imple... by ghaff on Wednesday November 02, 2022 @10:15AM (#33436150)
What's the advantage relative to a soft token? (Though it's arguable that Apple/Android should have an installed soft token out of the box.)
[ Parent | on HN ]
Re:Ask HN: How can techies influence companies to stop imple... by bombcar on Wednesday November 02, 2022 @11:45AM (#33437699)
It can be a hard token utilizing the secure features of the phone itself.

This has the downsides if you lose the phone you lose the token, but that downside exists for a physical token, too.

The goal is to encourage them to support the tokens so that those who want to can go phone-free (by using a hardware yubikey instead).

[ Parent | on HN ]