3 ms·
Having something like yubikey is better than just SMS given the phishing attack scenario will have to convince you to type in the SMS code, which should set off
by ec109685 10y ago
Having something like yubikey is better than just SMS given the phishing attack scenario will have to convince you to type in the SMS code, which should set off alarm bells if you have a functioning yubikey installed on the device you are logging in from.
- tptacek 10y agoNo, that's not the problem with SMS. The problem with SMS is that SMS is itself insecure; in fact, there are large parts of the world where it's overtly and directly state-controlled. You won't have to enter your SMS code; the attacker will do it for you.