3 ms·
Except 2fa doesn't work in practice unless you're an expert. See eg gmail: you can't set up 2fa without supplying a cell (you will be allowed to remove it late
by x0x0 10y ago
Except 2fa doesn't work in practice unless you're an expert.
See eg gmail: you can't set up 2fa without supplying a cell (you will be allowed to remove it later, but how many know to do this?) Your phone number is trivially stealable -- see eg youtube video of people just stealing phone numbers with a crying baby and a sob story. https://youtu.be/F78UdORll-Q?t=133 https://youtu.be/F78UdORll-Q?t=133
Also, lots and lots of places have trivial routes around 2fa because people losing their password and/or 2fa is an order of magnitude more common than theft.
- skylark 10y agoGoogle actually lets you use a physical key to protect your account. https://support.google.com/accounts/answer/6103534?hl=en&ref_topic=6103521 https://support.google.com/accounts/answer/6103534?hl=en&ref...
- striking 10y ago2FA works in practice against people who don't have physical contact with you. For most people, that's the only threat vector they're worried about. It hardly makes your life more difficult, and it does help at least a little bit. So it's worth setting up.
- x0x0 10y agoNot really; sms as 2fa has regularly enabled people to steal accounts they otherwise couldn't have gotten by allowing password resets by stealing your phone number. See eg @deray getting hacked.
- erroneousfunk 10y agoIf a password reset is allowed by pin that's not two factor authentication, that's SINGLE factor authentication. I know we tend to think of 2FA as anything involving a pin sent to your phone, but it does require two factors. GMail, for instance, will not allow a password reset with just a phone pin.
- whyagaindavid 10y agoI wonder why you cant get a pre-paid at a kiosk. Use a burner phone. Yes, you need some time and effort but if you need good security you will suffer some inconvenience. BTW register the SIM with your spouse or parents name so that there cannot be an easy connection to _any_ of you accounts. Remember also to top-up your prepaid SIM occasionally.
- noir_lord 10y agoAn non-contracted burner phone in your spouses name that is used to send cryptic looking messages. That seems like the kind of thing that'd get you on an intelligence agencies watch-list..though these days it's rather hard to find something that wouldn't.