4 ms·
> SMS 2FA was not good enough, you need the hardware-based 2FA OT, but Apple is doing the right thing here: SMS is not a robust 2FA solution. A recent discussi
by pcl 7y ago
> SMS 2FA was not good enough, you need the hardware-based 2FA
OT, but Apple is doing the right thing here: SMS is not a robust 2FA solution. A recent discussion: https://news.ycombinator.com/item?id=22016212 https://news.ycombinator.com/item?id=22016212
- Andrew_nenakhov 7y agoTheir approach is still ridiculous. I once tried to log into a brand new iOS device in a shop, and has unpleasantly learned that I absolutely can't log in using my regular Apple ID, cause, you know, they are showing a popup with code on my Mac which is 50km away.
- Klonoar 7y agoThat's... how 2FA sans texting works in the Apple ecosystem, yes. It's working as designed.
- Andrew_nenakhov 7y agoThat's exactly what I am complaining about: it is designed badly, I didn't ask for this and I can't turn it off.. I didn't ask for this, and still can't turn it off. On the other hand, Google does even worse: sometimes it requires 2FA with SMS when I have specifically turned it off, knowing I'll be abroad without SMS connectivity. Still, Google doesn't give a shit on disabled settings and still demands 2FA auth on connects from previously unused addresses. The only reliable way to circumvent this is to use a VPN with a fixed address, so Google always thinks it's a 'same' location.