News for hackers. Stuff that matters.
Re:Let's Ban SMS 2FA by panarky on Monday February 26, 2024 @12:04AM (#39507859)
> much better than nothing

If you wouldn't advocate banning deadbolt locks just because vault doors are better, why advocate banning SMS 2FA?

Re:Let's Ban SMS 2FA by nullc on Monday February 26, 2024 @08:04PM (#39518796)
One reason to ban 2FA SMS is because end users take on most of the cost of a compromise, but they are generally pretty poweless to prevent others from creating the vulnerability, particularly where the party requiring the SMS 2fa is a government or government contractor.

I don't know that I'd go so far as saying that a ban is the right thing, but something is needed.