News for hackers. Stuff that matters.

A comment on The "email is authentication" pattern. Parent comment

Re:The "email is authentication" pattern by j45 on Saturday September 07, 2024 @07:11PM (#41477013)
SMS codes for anything are not secure. Convenience over security, maybe.

SMS are as secure as a letter compared to a postcard.

[ Parent | on HN ]
Re:The "email is authentication" pattern by paradox460 on Sunday September 08, 2024 @12:57AM (#41478298)
And they're rather irritating to boot. TOTP authentication in something like keypass or 1password is very low friction, working automatically in ideal circumstances. Sms based ones are kludgy
[ Parent | on HN ]