News for hackers. Stuff that matters.

A comment on Ask HN: How can techies influence companies to stop implementing SMS/phone 2FA. Parent comment

Re:Ask HN: How can techies influence companies to stop imple... by lxgr on Wednesday November 02, 2022 @04:22PM (#33442434)
Note that using SMS-OTP as a second factor besides the password/security questions, 2FA is never a downgrade, but using SMS-OTP as a single recovery factor (for a forgotten password) definitely is. Only the latter is a problem.
[ Parent | on HN ]
Re:Ask HN: How can techies influence companies to stop imple... by joshspankit on Wednesday November 02, 2022 @09:11PM (#33445345)
It’s still a downgrade because it’s an avenue for social engineering the customer service/support reps
[ Parent | on HN ]