5 ms·

You don't need a smartphone or 2FA device to generate TOTP codes, and in fact, can use applications like Bitwarden. SMS is obviously not adequate, or the Jack D

You don't need a smartphone or 2FA device to generate TOTP codes, and in fact, can use applications like Bitwarden. SMS is obviously not adequate, or the Jack Dorsey wouldn't have been hacked.

mikeash 7y ago
Twitter doesn’t use 2FA over SMS. Dorsey’s hack doesn’t tell us anything about that.
- mceachen 7y ago
  Yes, they do. 2FA is via SMS or TOTP. Frustratingly, you can't enable TOTP without a phone number, and if you remove your phone number, you disable 2FA.
  - mikeash 7y ago
    No, they don’t. You can access your account with just SMS. That makes it 1FA.