News for hackers. Stuff that matters.

A comment on Second Factor SMS: Worse Than Its Reputation. Parent comment

Re:Second Factor SMS: Worse Than Its Reputation by slow_typist on Thursday July 11, 2024 @02:59PM (#40939509)
I think 2FA via texts is better than no 2FA. But only if you do not make the texts world readable.

Apart from that, to me it seems justifiable to follow a risk based approach. Booking systems up to a certain value/amount, fine. Online Banking and health related services, thank you, no.

[ Parent | on HN ]
Re:Second Factor SMS: Worse Than Its Reputation by sleepyhead on Thursday July 11, 2024 @04:11PM (#40940187)
It's not really 2FA even. More like a magic link (which is what we use for verification via email). The customer has no password, just verifies using a code via sms/email.
[ Parent | on HN ]
Re:Second Factor SMS: Worse Than Its Reputation by slow_typist on Friday July 12, 2024 @12:07PM (#40946834)
Passwordless, so to speak. Does it help with conversion rates?
[ Parent | on HN ]
Re:Second Factor SMS: Worse Than Its Reputation by sleepyhead on Tuesday July 16, 2024 @04:10PM (#40979868)
It’s for the booking site so most visitors come to make a booking thus conversion rate would be high generally. We never had passwords there so can’t compare conversion rates.

For signups to our app (to get an account with a booking site) we require a password.

[ Parent | on HN ]