3 ms·
I understand that it could reduce your security to the level of one-factor authentication. That's really easy to do. It is not reducing the security below wha
by otterlicious 8y ago
I understand that it could reduce your security to the level of one-factor authentication. That's really easy to do. It is not reducing the security below what one-factor authentication provides, like the OP argued it did.
- vanguard_u2f 8y agoI compromise your SMS. I initiate password recovery, and tell Vanguard "I forgot my password -- but look! It's still me! I can receive SMS challenges!"
- otterlicious 8y agoThat's a SMS password reset mechanism, e.g. one-factor authentication, not two-factor authentication.
- vanguard_u2f 8y agoThat's my point. Adding an SMS number to your account reduces the security of your account to one-factor SMS authentication.
- Latteland 8y agoThe point here is that if you cannot remove the much lower sms sec then it's no more secure than sms only