3 ms·
They don't have to be totally unique and secure for most users. It's an imperfect solution to a difficult problem - throttling user account creation.
by burtonator 7y ago
They don't have to be totally unique and secure for most users.
It's an imperfect solution to a difficult problem - throttling user account creation.
- Thorrez 7y agoUsing phone numbers for throttling user account creation has no security problem. Using phone numbers for 2FA has no security problem compared to password 1FA. The security problem comes when companies use phone numbers for 1FA (during account recovery).
- reaperducer 7y agoIt's an imperfect solution to a difficult problem - throttling user account creation. A very imperfect solution when it comes to FastMail. In moving my accounts from Gmail to FastMail it wouldn't allow me to add more than x number of accounts verified with the same cellular number. Even though they were paid accounts. So some of my family remains on Gmail because I only have one phone number that receives SMS messages.