4 ms·
A two-factor authentication token to sent via text, not the actual password. That said, I find SMS-based 2FA to be pretty dodgy as well. Cloudflare was hacked
by Laforet 11y ago
A two-factor authentication token to sent via text, not the actual password.
That said, I find SMS-based 2FA to be pretty dodgy as well. Cloudflare was hacked once by somebody who managed gain access to an admin's mobile phone by social engineering their telco. If a site does not offer TOTP based 2FA I usually don't bother using it.
- jsprogrammer 11y agoI didn't say the actual password. The page wasn't very forthcoming on all the details, but a 2FAT is typically just a very short, temporary password.
- suneilp 11y agoHow does TOTP compare to HOTP?
- Laforet 11y agoHOTP tokens does not expire with time, so there is a bigger risk of them being stolen from transit/storage and successfully used.