4 ms·
The comparison is to "One Time Passwords (OTP)via SMS phone messages." Given the vulnerabilities in GSM, that's not a high bar. http://security.stackexchange.c
by spqr0a1 10y ago
The comparison is to "One Time Passwords (OTP)via SMS phone messages."
Given the vulnerabilities in GSM, that's not a high bar.
http://security.stackexchange.com/questions/11493/ http://security.stackexchange.com/questions/11493/
- spankalee 10y agoYou forgot "including"
- nickik 10y agoThe even more relevant comparison is to TOTP. Many places support 2Fa over TOTP, far viewer support 2Fa over U2F. The big problem with TOTP is that real time attacks can still get you when you get MITM. Edit: I now understand you were talking about the article, not the technology itself
- fulafel 10y agoAlso totp hardware tokens suck (get out of sync) and totp smartphone apps suck because Android phones are so insecure/malware ridden.