4 ms·

Similar thing happened to me about a year ago. The creepiest part was - it happened while I was in the international flight and my gmail WAS on sms "two factory

Similar thing happened to me about a year ago. The creepiest part was - it happened while I was in the international flight and my gmail WAS on sms "two factory" authentication... Since then everywhere i can I used OTP, but some sites fallback to use your phone number if you can't provide OTP password... So I have to enter some completely invalid phone number there to make it impossible.

acomar 8y ago
There are a few sites that won't accept this and won't even accept a Google Voice/VOIP number because they do some kind of check. Very frustrating.
- r00fus 8y ago
  Can you provide a number (i.e. POTS) that has no SMS capability?
gowld 8y ago
What's the point of having a lock (OTP) if the lock is removed upon an attacker's request?
inetknght 8y ago
SMS is not two factor authentication, no matter what ISPs or websites tell you.
- chayesfss 8y ago
  Actually it is a form of 2fa, might not be one you like but it’s better than 1fa or kba which is double single factor
  - weej 8y ago
    Agreed. Although poor security with easy hijacking, it's still a form of 2FA. Even NIST doesn't recommend it as a factor to use for authentication.