5 ms·
It's why most of 2FA implementations is BS. It's truly only whoever has access to your number or email can do whatever.
by hartator 7y ago
It's why most of 2FA implementations is BS. It's truly only whoever has access to your number or email can do whatever.
- rando444 7y agoI wouldn't say it's BS. It's just not perfect. The standard person today isn't capable of managing multiple secure tokens, and actually keeping them separate. One smashed phone, and truly secure accounts would be lost forever, or require significant resources on the part of the provider to re-verify people's identities.