3 ms·

Ask HN: Paypal's 2FA verification accepts a COMPLETELY NEW # for “verification”?

1 points by DrScump 9y ago

I just had to go through a 2FA for Paypal (since I'm using a VPN), and the only 2FA mechanism it gave me was via SMS... to an analog landline. Geniuses. So, I add an alternate mobile number I had handy... and it happily accepted it and used it as "verification". Am I overthinking this? How is it a "verification" if I can feed it any unrelated number with no history with my account and it will accept that as "verification"?

tomcam 9y ago
But you were logged in, right? I mean, that's still not the best security but this message sort of implied you weren't logged in.