News for hackers. Stuff that matters.

A comment on Ask HN: Carrier “lost” my number in a port request. Parent comment

Re:Ask HN: Carrier “lost” my number in a port request by LocalPCGuy on Wednesday November 02, 2022 @10:51AM (#33436764)
This is why you always (always) have backup codes. If a site doesn't provide them (and only allows 2FA via SMS rather than also via Time-based one-time password), that's a huge red flag to me (and yes, I'm aware some very large sites fall into that bucket).
[ Parent | on HN ]
Re:Ask HN: Carrier “lost” my number in a port request by tjoff on Thursday November 03, 2022 @02:54AM (#33447888)
So U2F is a red flag?

Maybe 2FA should be considered a red flag at this point.

[ Parent | on HN ]
Re:Ask HN: Carrier “lost” my number in a port request by LocalPCGuy on Friday November 04, 2022 @01:28PM (#33470498)
2FA by itself isn't a flag to me, only offering 2FA via SMS is. It means to me they did the bare minimum in order to say they offer 2FA.
[ Parent | on HN ]