3 ms·
Not really; sms as 2fa has regularly enabled people to steal accounts they otherwise couldn't have gotten by allowing password resets by stealing your phone num
by x0x0 10y ago
Not really; sms as 2fa has regularly enabled people to steal accounts they otherwise couldn't have gotten by allowing password resets by stealing your phone number.
See eg @deray getting hacked.
- erroneousfunk 10y agoIf a password reset is allowed by pin that's not two factor authentication, that's SINGLE factor authentication. I know we tend to think of 2FA as anything involving a pin sent to your phone, but it does require two factors. GMail, for instance, will not allow a password reset with just a phone pin.