2 ms·
"It seems like by having the ability to change one’s [Instagram] password by email or by mobile alone negates the second factor and it becomes either/or from th
by elipsey 8y ago
"It seems like by having the ability to change one’s [Instagram] password by email or by mobile alone negates the second factor and it becomes either/or from the attackers point of view."
I believe I have seen this version of "2FA" often enough that it might be considered an anti-pattern. 0.5FA?
- closeparen 8y agoWorse, it’s the most important accounts that support the weakest 2FA. U2F support is a solid guarantee that the site has nothing of value. Anything important, especially a bank, is guaranteed to be SMS/phone only.