News for hackers. Stuff that matters.

A comment on Ask HN: How can techies influence companies to stop implementing SMS/phone 2FA.

Re:Ask HN: How can techies influence companies to stop imple... by insanitybit on Wednesday November 02, 2022 @11:31AM (#33437482)
The short version is to probably try to document the upsides and downsides of 2FA options and then petition NIST/CISA to recommend against SMS 2FA. Eventually that will make it to the auditors who certify institutions and force them to upgrade.

Congress isn't really going to be relevant. The auditors have far more control.

[ Parent | on HN ]

There are no comments on this comment yet.