3 ms·
It's completely ridiculous for a service to offer 2FA with SMS and also password recovery via SMS to the same phone number Why is this ridiculous? Isn't this
by exhilaration 10y ago
It's completely ridiculous for a service to offer 2FA with SMS and also password recovery via SMS to the same phone number
Why is this ridiculous? Isn't this the same thing that Gmail offers for your own account? If you lose your password, Gmail will only send the recovery info to your friend's phone?
- averagewall 10y agoThe problem happens if the password can be recovered with the same phone number as used for 2FA since then anyone who steals the phone/phone account can get both the password reset and the 2FA SMS. However, using two different numbers means a hacker has to hack two phone accounts instead of one. At least I hope that's what they have to do.