News for hackers. Stuff that matters.

A comment on ‘I will show you how safe Telegram is’. Parent comment

Re:‘I will show you how safe Telegram is’ by entropyneur on Thursday February 16, 2023 @09:32AM (#34819107)
It's worse. 2FA is optional and SMS code is the first (and default) auth method.
[ Parent | on HN ]
Re:‘I will show you how safe Telegram is’ by super256 on Thursday February 16, 2023 @09:53AM (#34819379)
> It's worse. 2FA is optional and SMS code is the first (and default) auth method.

This will be changed on Saturday.

Got the following message about API changes last week: https://telegra.ph/Telegram-API-Changes-02-16

[ Parent | on HN ]
Re:‘I will show you how safe Telegram is’ by entropyneur on Thursday February 16, 2023 @11:08AM (#34820495)
That announcement seems to be concerned with unofficial clients only. But it does sound like the change is a part of some bigger package.
[ Parent | on HN ]
Re:‘I will show you how safe Telegram is’ by anonymoose33282 on Thursday February 16, 2023 @01:29PM (#34823241)
But given the choice, isn't SMS a stronger first authentication factor? It's temporary and randomized, whereas users don't change passwords that frequently. So a password is much more susceptible to keyloggers/malware/brute-force than an SMS code.
[ Parent | on HN ]