Re:Ask HN: How can techies influence companies to stop imple...
by 0xbadcafebee on Wednesday November 02, 2022 @10:46AM
(#33436680)
Nobody has actually tried a concerted effort to banish SMS 2FA (that I know of). Here's how you do it:
1. Marketing. You make a big marketing push to tell people that you are spearheading change; SMS 2FA is old and busted, X is the new hotness.
2. Figure out what X is. Actually, doing this before #1 might help. It must only be one thing, and it must be dead simple, and it must work for 90% of people without annoying the fuck out of them. "Technically superior" is bullshit, it must be superior to an organization and an individual lazy user.
3. Get a coalition together of corporations who depend highly on SMS 2FA. Get them to all agree to be involved in changing to X. Actually, do this before #1, but after #2.
4. Get official standards bodies, the government, consumer protection agencies, etc. to all make official proclamations that SMS 2FA is a danger to the nation and should be abandoned in favor of X.
1. Marketing. You make a big marketing push to tell people that you are spearheading change; SMS 2FA is old and busted, X is the new hotness.
2. Figure out what X is. Actually, doing this before #1 might help. It must only be one thing, and it must be dead simple, and it must work for 90% of people without annoying the fuck out of them. "Technically superior" is bullshit, it must be superior to an organization and an individual lazy user.
3. Get a coalition together of corporations who depend highly on SMS 2FA. Get them to all agree to be involved in changing to X. Actually, do this before #1, but after #2.
4. Get official standards bodies, the government, consumer protection agencies, etc. to all make official proclamations that SMS 2FA is a danger to the nation and should be abandoned in favor of X.