5 ms·

Honestly, I hate how many 2FA systems want you to use a phone number. There are other ways that are much better.

• snarfy 8y ago
  Everybody punts security issues from identification to the next guy. Eventually the only safeguard left between you and the bad guys is a minimum wage salesman working at the t-mobile counter. It's sad to know that all of your primary email addresses, with links to online shopping accounts with credit cards, bank accounts, etc, can all be accessed by spoofing your phone number.
  • anfilt 8y ago
    I honestly wish sites would use client side certs or auth via a private key.
    • tialaramex 8y ago
      Client side certs mean now every user has a verifiable identity. Maybe you're OK with Facebook knowing your full ID, but is it also OK to tell Grindr, Redtube and Amazon? Security Keys are better here. The security key can prove to a site that its the same one as before. "Before what?" Well that's up to the site. In most cases it's going to register one or more keys when you sign up to the site, and then check you still have one when logging in. This is completely useless for everything except the one thing it's intended for, a Second Factor during login.
      • anfilt 8y ago
        You can always generate a new key pair though. I don't necessarily mean a cert signed by a CA. More akin to use a key pair for SSH.